Top Stories

Best Bug Bounty Program, Best Upcoming Bug Bounty Program & Best Bug Bounty Issue in 2014

In september 2014 last year we started a large campaign to reward the "Best Bug Bounty Program" and "Best Upcoming Bug Bounty Program" in 2014.

Next to the new special event we also coordinated to reward the best bug bounty submission of the year 2014 in the Vulnerability Laboratory with a special trophy.

100 active Vulnerability Laboratory members started to vote the "Best Bug Bounty Program 2014" followed by 101 independent vulnerability researchers and bug bounty hunters. The best bug bounty program of the year 2014 must have the following characteristics to win the independent security competition.

LizardSquad DDoS Stresser - Multiple Vulnerabilities revealed

The core team of the vulnerability laboratory is daily watching for new web-application in the it-security sector. This week we have tested the new software of the lizard squad to discover some web-vulnerabilities. In the last days was several public announcements about the SQL Database leak of the DDoS Stresser online-service. For sure you need some 0day vulnerabilities in the application that has been revealed by the evolution security gmbh team. We did not report the issue to provoke any kind of cyberwar. We demonstrated the issues without the full proof of concepts to prevent target user damage.