pentesting

#infoseckk: meetup 2017.1

Submitted by Arthur Raymond on Tue, 2017-01-03 14:18

The Information Security KK Group (formerly known as #pentesting) will have its first 2017 meetup this week.

We will be discussing our wish-list for the new year. On the agenda are: CTF (Capture the Flag) competitions, hackathons, and training/hands-on sessions. Got a nice idea or planning to start something related to information security? Come along and join us on Thursday at Smartspace KK, Level 9, Wisma Bandaraya, Kota Kinabalu; and/or leave a message/comment on this event :)

Bounty: 1/1482212663

Submitted by Arthur Raymond on Mon, 2016-12-19 23:50

The pifi.my project invites bug-hunters to examine and test the pifi.my dashboard. We seek the detection of three classes of bugs/security vulnerabilities: general login bugs (that does not allow authorisation bypass); view other report groups (semi-bypass of authorisation); and full authorisation bypasses. The bounty payout requires that you are able to reliably repeat the bug/vulnerability in a demonstration to the developers. Since this is an on-going project, multiple claims may be made for this bounty.