YesWeHack ⠵

Hey, hunters! We just dropped a new deep dive on code analysis 💡 Our latest hunter guide covers advanced techniques such as taint analysis and CodeQL, demonstrated with real tools against a real target 👇 #BugBountyTips yeswehack.com/learn-bug-boun…

Find out more about our approach for using AI securely, responsibly and effectively: yeswehack.com/product/ai-vul…

This means AI outputs are reviewed by analysts and critical decisions always remain in human hands 🔍 Maintaining human oversight is essential to preserving customer trust and ensuring we remain accountable for our decisions and recommendations 🤝

Risk and compliance practitioners expect to have “more human oversight of AI as its use increases,” according to a Moody’s report on AI adoption in the field 🤖 At @YesWeHack, this is a core principle: artificial intelligence is deployed strictly with a ‘human in the loop’ 👨

Still trusting Python built-ins to keep you safe? 👀 This research shows how pitfalls in os.path.join, urljoin, pickle.loads and PyYAML turn simple logic into real vulns like Path Traversal, SSRF and RCE 👇 yeswehack.com/learn-bug-boun…

Which type of bug do you enjoy hunting the most? 👇 #BugBountyTips

We asked @yeswehack hunters what drives their program choices. The top factor? Program reputation for fast report acceptance and fair, timely payouts. Agree, hunters? 👇 Full survey results in our 2026 report: choose.yeswehack.com/bug-bounty-rep…

@mcz3n Well done! Keep up the great work 💪

Just got a reward for a vulnerability submitted on @yeswehack -- Business Logic Errors (CWE-840). #YesWeRHackers

@arundr0id That's great! Congratulations 👏

Just got a reward for a critical vulnerability submitted on @yeswehack This was huge for me. Been following @adnanthekhan 's work. Pwn Request is my favourite bug. #YesWeRHackers #BugBounty

@just_ismail_ Hello, We are unable to provide any information regarding this subject. We invite you to contact support@yeswehack.com who are in communication with the relevant teams. Thank you for your understanding, The YesWeHack team

Hi @yeswehack how can i request for a mediation ? A triage team just downgraded a BAC (Admin access) from critical 9.1 to high 7.7 without any explanation or justification and then ghosted me they never responded again. Could you please do something about it?

@DuckyWantDucky That's great! Congratulations 👏

@YoyoDavelion @yeswehack congrats brotha

New bounties on @yeswehack #bugbounty

@Cryptycore That's great! Congratulations 👏

@AmyShatu @yeswehack 🔥🫡

Alhamdulillah, Thanks to amazing platform @yeswehack

@txp__9 Hello, If you've emailed support, rest assured that they will reply in due course. Thank you, The YesWeHack team

@yeswehack Hi @yeswehack account N0TRE3L (Verified Iraqi researcher) was flagged after adding a Swiss IBAN due to local bank limits. Emailed support with no reply. Need help ensuring rights for hunters worldwide.

What’s something you wish you’d learned earlier in Bug Bounty? 👇 #BugBountyTips

@N_ambush That's great! Congratulations 👏

Just got a reward for a vulnerability submitted on @yeswehack -- Cross-site Scripting (XSS) - Reflected (CWE-79). #YesWeRHackers

Hackers in San Francisco? 🇺🇸 Come meet our team in two weeks at @HackTheBayCon! We’re excited to connect with the Pacific hacking community and share a beer during the @YesWeHack Happy Hour 🍻 See you there 😎 @PacificHackers #HackTheBay

@fahadd_25_ Hello, We invite you to contact the YesWeHack support who should be able to assist you with this. Thank you for your understanding, The YesWeHack team

@yeswehack Hello YesWeHack Team I have recently registered a new Hunter account using this email, but I haven't received the activation link yet. I have checked my Spam and Promotions folders, but nothing is there. Could you please help me activate my account?

What’s your favourite write-up you’ve read recently? 👇 #BugBountyTips

@g0ktugkaya This is impressive. GG! 🔥

Just got a reward for a vulnerability submitted on @yeswehack #bugbounty #YesWeRHackers

@4osp3ll That's great! Congratulations 👏

@RadoGold57 @yeswehack Congratulations

Just got a reward for a vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). #YesWeRHackers

Just a reminder: Secret Manager is still live! 😎 How about grabbing a coffee, settling in comfortably, and exploiting an argument injection bug? ☕ Will you be able to capture the flag? Let's find out 👉 dojo-yeswehack.com/challenge-of-t… #CTF #BugBounty