YesWeHack ⠵

😎 @PUMA brought the targets. Hackers brought their A-game. At @_leHACK_, our live hacking event saw the PUMA team, bug hunters and @YesWeHack come together for two days of collaboration, creativity and impressive findings. Watch the aftermovie and see how it all unfolded 👇

Ever wondered how to find WebSocket vulnerabilities while bug hunting? 👀 @amrelsagaei breaks it all down in a full video, from spotting potential issues to testing and exploiting them! Watch it here 👉 youtube.com/watch?v=UV4dO8…

Thank you @yeswehack for being a happy hour sponsor! 🍹 Tuesday drinks on them 😉 Interested in learning more about their company? Visit welcometothejungle.com/fr/companies/y…

Claude Code went hunting blind – no hints 🧐 It mapped the app, tested multiple attack paths and found an impressive request smuggling bug 🔍 But proving impact? Still on the hunter 👀 Our guide to Claude Code for bug hunting 👇 yeswehack.com/learn-bug-boun…

🎉 We have completed half of the 2026 Public Intrusion Test for Swiss Post’s e-voting system! Since the launch, Swiss Post has received over 60 reports. THANKS 🙏 Do you want to take part as well? Until 24 July, take your shot and earn up to €230K 👉 yeswehack.com/programs/swiss…

@AsterionN64 That's great! Congratulations 👏

Just got a reward for a vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). #YesWeRHackers

@pr0cellFr0st That's great! Congratulations 👏

Just got a reward for a vulnerability submitted on @yeswehack -- HTML Injection (CWE-79). #YesWeRHackers Mi primer bug aceptado 🥲, estoy muy contento 😭

@NoobosaurusR3x This is impressive. GG! 🔥

Just received a nice bounty for an XSS (CWE-79) Thank you @yeswehack ! Public programs are not dead ;) #YesWeRHhackers

The solution to our latest Dojo challenge, Streamcore, is out! 🏁 See how a path traversal vulnerability in a JWT `kid` parameter can be chained to read system files! Check out the full write-up 👇 yeswehack.com/dojo/dojo-chal…

@Babauca That's great! Congratulations 👏

Just got a reward for a vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). #YesWeRHackers

@_jarom_ That's great! Congratulations 👏

This definitely made my day. Thanks @YesWeHack.

@0xOFFA That's great! Congratulations 👏

Thanks @YesWeHack for the amazing swag 😍😍

Autonomous attacks + a validator agent to catch bugs and avoid false positives = that is how @Rhynorater uses AI to hunt faster without sacrificing quality. He also shares how Claude Code helped uncover one of his proudest XSS finds. Full interview 👇 yeswehack.com/community/llms…

Ever looked at a "Forgot password" form? It might be building the reset link from a header you control 🤔 Add X-Forwarded-Host: domain.com to the reset request. If the email link points to evil.com, the victim clicks → their reset token lands on your server 🎯 #BugBountyTips #YesWeRHackers

We have our monthly Dojo champions! 🏆 Kudos to tio123, VictorTrend1 and Zwenkyz for solving Streamcore - you’ve earned a nice @yeswehack swag pack 😎🎁 Keep an eye on your mailbox 📬 ⚔️ Didn’t win this time? Stay tuned: dojo-yeswehack.com/challenge-of-t… #BugBounty #CTF

⏱️ 31 hours, 200+ reports, 71 hunters Our live hacking event at @_leHACK_ put @PUMA's systems to the test – our biggest leHACK #BugBounty yet. AI was in the mix, but the overall winners (@Vozec1, @_Worty) actually skipped automation. A win for human ingenuity 🧠 Full recap 👇 yeswehack.com/news/puma-live…

@R1s666 That's great! Congratulations 👏

Just got a reward for a vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). #YesWeRHackers

Last chance! 🚩 Streamcore is live until July 12. Can you figure out what is Streamcore hiding and read system files before time runs out? ⏳ The clock is ticking: dojo-yeswehack.com/challenge-of-t…

“YesWeHack saving our butts!” In the latest episode of @ctbbpodcast, @Rhynorater highlights our joint research with @sekoia_io. We exposed an undocumented supply chain attack targeting hackers via fake CVE PoCs. He also highlighted our @PUMA Live Hacking event at @_leHACK_ - 200+ reports in just 32 hours was indeed something! Enjoy the episode 👇 youtu.be/IESlRFjT0G8?si…