https://krash.dev/tags/bug-bounty/Recent content in Bug-Bounty on krash.devHugoen-usFri, 14 Aug 2026 08:29:09 +0530https://krash.dev/posts/bug-bounty-summit-ctf-writeup/Mon, 02 Nov 2020 00:00:00 +0000https://krash.dev/posts/bug-bounty-summit-ctf-writeup/<p><em>The CTF is live on Hacker101 as Grayhatcon CTF – <a href="https://ctf.hacker101.com/ctf" target="_blank" rel="noopener noreferrer">Hacker101 CTF</a></em></p> <p>The CTF was built upon real vulnerabilities found during bug bounties. It had four flags – 250 points each.</p> <blockquote><p><strong>Objective</strong> - Hackerone&rsquo;s Username and Password database has been leaked and put on an auction. Our task was to delete the auction listing before anyone buys it.</p> </blockquote><p>We were given an IP, which resolved to a web application. On performing some basic information gathering, I found out some stuff.</p>