Cheap Bugs

I guess it's just free bugs until I hit 500 🔥🪲🔥

Shitpost successful, Blue acquired 😆 Next hurdle, need 500 followers to enable subscriptions 😬

@wireglitch @deanpierce RIP. Looks like I've got a lot of shit-posting to do before it will let me activate Blue so I can start taking subscriptions 😢

@wireglitch @deanpierce 👀

April was a fun month. We've got a nice clean SQLi, and some pretty wide reaching XSS bugs across two platforms. Want to see? Subscribe now!

@wireghoul True, but that hasn't been much of a problem. Most appsec bugs get simultaneously reported to vendors, and if not, the rules are pretty lax.

Holy cow, a record of 11 SQL injections submitted this month, and all by the same researcher, who took home the entire February prize pool!

Wow, crazy month. SQL injections, a command injection, and our first local root exploit groups.google.com/a/cheapbugs.ne… Not a subscriber? do it now!

The December report is now live: groups.google.com/a/cheapbugs.ne… Still not a member? Sign up today for full archive access! cheapbugs.net

{${print%20`echo%20%27November%20CheapBugs%20Report%20is%20out%20now!%27%26%26cat%20%2Fetc%2Fshadow`}}

The October report is out! @d1m0ck dominated again with some crazy good findings, and @tbmnull provided some pretty hilarious bugs as well.

The September report is live! @d1m0ck really cleaned up this month, taking over 100 dollars of the prize pool. Great work everyone!

And we have our first bug of the month! An interesting little diddy which can be used to hijack the SSO login form for a large tech company.

After a record breaking point spread for the last payout, September has been super quiet. Right now a single XSS could take home everything.

annd.. were back! The Vegas hangovers have faded and we've combined July and August payouts into one, and are doing them a week early!

Hey CheapBugs followers. If you happen to be in Vegas this fine evening (Saturday), we are doing a cheap bugs mixer in Bally's 2602 at 9pm.

Subscribe to @cheapbugs , its hilarious.

The May Cheap Bugs report is now online! We've got a great bug from in a major retail chain, and a whole lot of Malaysia. Thanks everyone!