YesWeHack
75 talks · 2023–2026 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- PUMA x YesWeHack: Live Hacking Event at leHACK 2026 2026
- Cyber Security Agency of Singapore x YesWeHack: SPIRITCYBER IoT Bug Bounty at SICW 2025 2025
- Live Hacking Event at leHACK - 2025 Edition 2025
- TeamViewer x YesWeHack: Live Hacking Event at Nullcon Berlin 2025 2025
- Ferrero x YesWeHack: Italy's First-Ever Live Hacking Event at RomHack 2024 2024
- L'Oréal x YesWeHack: Live Bug Bounty event at leHACK 2024 2024
- Live Bug Bounty event with Les Mousquetaires and the French Red Cross - leHACK Paris 2023 2023
- Live Bug Bounty event with OTTO - Nullcon Berlin 2023 2023
- Banco Galicia x YesWeHack: Live Bug Bounty highlights from Ekoparty, Argentina
- El Mago x YesWeHack #1: Exploring the Dojo CTF training platform
- El Mago x YesWeHack #2: Tackling error-based XXE on Dojo challenge #42
- El Mago x YesWeHack #3: Live Recon on ATG Bug Bounty Program
- French Armed Forces Ministry's Collaboration With YesWeHack
- Hack Me I'm Famous - Live Bug Bounty in Paris
- Hack Me I’m Famous #2 – Live Hacking Event with Louis Vuitton
- Introduction to Bug Bounty - YesWeHack
- Limitations Are Just An Illusion: Brumens on Leveraging Advanced SSTI Exploitation to Achieve RCE
- Live Bug Bounty event with Decathlon
- Live Bug Bounty event with Swiss Post - leHack
- Open My Heart - Live Bug Bounty event with Lazada - HITB Singapore
- SPARTA Monthly Workshop by YesWeHack
- SSRF with Whitelist-Based Input Filter – PortSwigger Web Security Academy #1 | Talkie Pwnii
- Talkie Pwnii #1: Exploiting SQL LIKE Operator & Command Injection Regex Bypass
- Talkie Pwnii #2: Exploiting second order SQL injection to extract data
- Talkie Pwnii #3: Python Format String Injection via Insecure Exception Handling
- Talkie Pwnii #4: Exploiting Punycode Homograph Attacks & Escaping NodeJS VM Module Sandboxes
- Talkie Pwnii #5: Exploiting server-side prototype pollution in Node.js
- Talkie Pwnii #6: Chaining regex bypass to RCE via Ruby IO.read
- Talkie Pwnii #7: Breaking lxml with Error-Based XXE and Local Entities
- Talkie Pwnii #8: From Predictable Tokens to YAML Deserialization RCE in Python
- Talkie Pwnii #9: Argument Injection via Wildcard and Grep Manipulation
- Talkie Pwnii Android Special #1: How to Setup Your Android Lab for Bug Bounty
- Talkie Pwnii Android Special #2: APK Extraction & Mapping Attack Surfaces
- Talkie Pwnii Caido Special #1: Intro to Core Functions for Bug Hunters
- Talkie Pwnii Caido Special #2: Advanced Features and Customisation
- What is a Vulnerability Disclosure Policy (VDP)?
- Wisdom of the crowd: What ethical hackers think about the YesWeHack Bug Bounty platform
- YesWeHack Bug Bounty Platform Demonstration
- YesWeHack Customer Story: ATG, Swedish betting and horseracing company
- YesWeHack Customer Story: Banco Galicia, Argentina's largest private retail bank
- YesWeHack Customer Story: Bancolombia Group, Latin American financial institution
- YesWeHack Customer Story: Crédit Agricole Personal Finance & Mobility, a European finance leader
- YesWeHack Customer Story: Doctolib, leading European e-health company
- YesWeHack Customer Story: European Community of Alsace, regional government body
- YesWeHack Customer Story: Ferrero, Italy's sweet-packaged food giant
- YesWeHack Customer Story: L'Oréal, world’s largest cosmetics and personal care brand
- YesWeHack Customer Story: Les Mousquetaires Group, retail distribution giant
- YesWeHack Customer Story: Parrot, European leader in professional drones
- YesWeHack Customer Story: PUMA, iconic sports brand
- YesWeHack Customer Story: TeamViewer, the digital workplace platform
- YesWeHack Customer Story: Withings, pioneer in connected health
- YesWeHack Hunter Interviews - #10 Blaklis: “I'm still a bit of a Cro-Magnon in the way I hack”
- YesWeHack Hunter Interviews - #11 Pwnii: “Don't forget that a duplicate bug is a valid bug”
- YesWeHack Hunter Interviews - #20 yassine_eal: “The most difficult for me was writing great reports”
- YesWeHack Hunter Interviews – #1 GoDiego: "Post-auth vulnerabilities are the future of Bug Bounty"
- YesWeHack Hunter Interviews – #12 gregxsunday: “I’m paying a lot of attention to SSO or SAML flaws”
- YesWeHack Hunter Interviews – #13 leorac: “Bug Bounty is a rollercoaster of emotions”
- YesWeHack Hunter Interviews – #14 g4mb4: “My favourite bug was an IDOR at a $1 billion company”
- YesWeHack Hunter Interviews – #15 lemonoftroy: “IDORs & broken access control are my favourite bugs”
- YesWeHack Hunter Interviews – #16 Wlayzz: “You always need to fight against yourself to find bugs”
- YesWeHack Hunter Interviews – #17 Aituglo: “I'm primarily looking at targets that I already use”
- YesWeHack Hunter Interviews – #18 SpawnZii: “I started tinkering with computers to jailbreak my PS3”
- YesWeHack Hunter Interviews – #19 rabhi: “I always tell young people that their #1 asset is time”
- YesWeHack Hunter Interviews – #2 Xel: “I could have taken control of about 50 firewalls!”
- YesWeHack Hunter Interviews – #21 sunshinefactory: “I really like to find new challenges to tackle”
- YesWeHack Hunter Interviews – #22 krevetk0: “I feel the value of my work when I get great results”
- YesWeHack Hunter Interviews – #23 Sn0rkY: “Your main tool should be your own knowledge & curiosity”
- YesWeHack Hunter Interviews – #3 Icare: “Be curious and persistent”
- YesWeHack Hunter Interviews – #4 Brumens: “Hunters should adapt payloads to their targets”
- YesWeHack Hunter Interviews – #5 Serizao & Chackal: “Sharing is caring” when it comes to hacking
- YesWeHack Hunter Interviews – #6 RL: “Documentation is a goldmine of information”
- YesWeHack Hunter Interviews – #7 drak3hft7: “Soft skills are as important as technical skills”
- YesWeHack Hunter Interviews – #8 HakuPiku: “Bug hunting makes me feel like a detective”
- YesWeHack Hunter Interviews – #9 Nagli: “When you’re a hacker you have some superpowers”
- ‘Start small – but start now!’ Inside Orange’s Bug Bounty journey with YesWeHack