Hi, I’m very happy to present you this week’s five items! After a few weeks break due to rich personal circumstances, it is time to resume our weekly shenanigangs…

1. Collection of hacker conferences #

https://infocon.org/

This site is a “Hacking conference archive”. It gathers presentation videos and slides from a lot of conferences, documentaries, podcasts and also rainbow tables. I love going through it to discover new conferences and talks from around the world!

2. Bug bounty reports Github repository #

https://github.com/gwen001/bb-reports-templates by Gwendal Le Coguic

Creating bug bounty reports templates is a great idea! It helps report bugs quickly and easily. This repository is a very nice starting point.

3. Tools of the week #

Domain analyzer Amass

I like using different subdomain finder tools and merging their findings for maximum results. These two tools are very effective and can be nice additions to your arsenal too.

4. Bug bounty write-up of the week #

How I used a simple Google query to mine passwords from dozens of public Trello boards by Kushagra Pathak

This is a good writeup on how simple Google queries can reveals very sensitive information stored on Trello boards. I am adding these tests to my penetration testing & bug bounty hunting checklists.

5. Trending twitter hashtags #

#bugbountytip #bugbountytips #togetherwehiharder #bountyprotip #XBugBountyTips #hackeradventures

I discovered many new tips shared by other hackers with these Twitter hashtags (except the last one which is just for fun). You gotta love this community!
If you known of other good hashtags related to bug bounty and penetration testing, please share them with us through a comment.

See you next time!

If you enjoyed reading this, please consider sharing it, leaving a comment, suggestions, questions…