Writing Vulnerability Reports that Maximize Your Bounty Payouts скачать в хорошем качестве

Writing Vulnerability Reports that Maximize Your Bounty Payouts

This 30 minute talk, by Kymberlee Price (originally given at Nullcon 2016), will discuss several critical steps to writing great vulnerability submissions that will speed up issue triage for the incident response team receiving your report (and result in higher bounty payouts). Examples of common mistakes will be reviewed with real submissions received by Bugcrowd. Key takeaways: -What to look at when reading the bounty brief -How to communicate impact using the STRIDE model -How to verify findings and provide POC & attack scenarios View the slides here: http://www.slideshare.net/bugcrowd/wr... Recorded April 1, 2016