YesWeHack, champion français du Bug Bounty et de la gestion des vulnérabilités, vient d’obtenir le statut d’autorité de numérotation CVE (CNA) auprès du

YesWeHack, la plateforme française de Bug Bounty, ou chasse aux bogues, a décroché un contrat de 7,6 millions d'euros avec la Commission européenne pour sécuriser les logiciels open source des institu...

AI scopes complicate security testing, while AI tools can accelerate remediation and exploitation. Learn about Bug Bounty risks and opportunities posed by AI.

Le spécialiste français du bug bounty entend diversifier son offre cyber, en ciblant plus spécifiquement les PME.

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit. - yeswehack/PwnFox

Bug bounty hunting is an exciting way to test your cybersecurity skills while earning rewards. Johan Brun recently shared his success story on LinkedIn about finding his first eligible vulnerability on YesWeHack, a top French bug bounty platform. You Should Know: 1. Getting Started with Bug Bounty Choose the Right Platform: YesWeHack ( is a great starting point. Understand Scope: Focus on programs where many testers have already searched—this forces you to think creatively.

Sécurité : L’application StopCovid doit voir le jour la semaine prochaine. L’Anssi et l’Inria ont confié à la plateforme YesWeHack le soin de mettre en place un programme de bug bounty visant à débusquer ses failles de sécurité. Les explications du directeur de la société, Guillaume Vassault-Houlière.

# Hacker profile - Dojo #40 Active until : **17th April - 2025** Authors: [Minilucker](https://x.com/0xidel) #### How to submit your report 1. Visit the Dojo program at [https://yeswehack.com/progr...

Learn various encoding methods, variable expression assignment, arrays in request parameters, JavaScript obfuscation and shell obfuscation in environments.

Introduction: The bug bounty landscape is evolving at a breakneck pace, with platforms like HackerOne, Bugcrowd, and YesWeHack offering unprecedented opportunities for cybersecurity professionals. Mastering a core set of tools and commands is no longer optional; it's the fundamental differentiator between a novice and a successful hunter. This article provides the essential toolkit to navigate this dynamic field. Learning Objectives:

Depuis 2015, Guillaume Vassault-Houlière dirige YesWeHack, une société qui met au défi des hackers du monde entier de trouver les failles de sécurité sur les réseaux des plus grands groupes. Moyennant...

Lancée en 2013 par une équipe de passionnés, la "petite entreprise" est devenue en quelques années une référence internationale avec plusieurs plateformes hyperspécialisées en sécurité informatique

The latest Bug Bounty Bulletin 11 by YesWeHack highlights critical cybersecurity developments, vulnerabilities, and deep dives into advanced exploitation techniques. Key takeaways include: CVE Database Update: Contrary to rumors, the CVE database remains functional and essential for vulnerability tracking. Next.js Auth Bypass: A critical vulnerability in Next.js middleware allowed authentication checks to be bypassed. Microsoft PoC Exploit: A humorous yet effective Zoolander-themed PoC demonstrated a security flaw in Microsoft systems.

Introduction: The recent Black Hat USA 2025 CTF challenge, "Hide & Seek," crafted by Alex Brumens for YesWeHack, presented a classic web security auditing puzzle. This challenge required participants to meticulously analyze source code to uncover and exploit a vulnerability, ultimately leading to the extraction of a hidden flag. Mastering such challenges is fundamental for developing the analytical mindset needed for advanced penetration testing and bug bounty hunting.