Global Bug Bounty & VDP Platform trusted by world's largest organizations.

Next.js Middleware Auth Bypass (CVE-2025-29927) and Local File Read via XXE - HackDonalds Challenge
10:41
Next.js Middleware Auth Bypass (CVE-2025-29927) and Local File Read via XXE - HackDonalds Challenge
Unwavering support: Your bug bounty journey, our priority - with Rocio, Head of Customer Success
2:56
Unwavering support: Your bug bounty journey, our priority - with Rocio, Head of Customer Success
Exploiting NoSQL Operator Injection to Extract Unknown Fields
15:58
Exploiting NoSQL Operator Injection to Extract Unknown Fields
Investing in the Future of Bug Bounty: A Conversation with Greg, Head of Product at Intigriti
1:52
Investing in the Future of Bug Bounty: A Conversation with Greg, Head of Product at Intigriti
Intigriti Customer Story: Grafana
3:08
Intigriti Customer Story: Grafana
Exploiting Syntax Injection to Extract Data
8:10
Exploiting Syntax Injection to Extract Data
Empowering ethical hackers: How Intigriti builds a thriving security researcher community
2:57
Empowering ethical hackers: How Intigriti builds a thriving security researcher community
Exploiting NoSQL Operator Injection to Bypass Authentication
7:39
Exploiting NoSQL Operator Injection to Bypass Authentication
Supercharge your vulnerability triage: Our investment in your efficiency
2:31
Supercharge your vulnerability triage: Our investment in your efficiency
Intigriti Kick-off 2025
2:27
Intigriti Kick-off 2025
Detecting NoSQL Injection
9:46
Detecting NoSQL Injection
URL Parsing Discrepancies, Path Traversal and XSS - Solution to January '25 Challenge
9:23
URL Parsing Discrepancies, Path Traversal and XSS - Solution to January '25 Challenge
OSINT: Following the Breadcrumbs - No Comment [INTIGRITI 1337UP CTF 2024]
4:21
OSINT: Following the Breadcrumbs - No Comment [INTIGRITI 1337UP CTF 2024]
Reversing an Insecure 2FA Generation Algorithm - Secure Bank [INTIGRITI 1337UP CTF 2024]
5:01
Reversing an Insecure 2FA Generation Algorithm - Secure Bank [INTIGRITI 1337UP CTF 2024]
Robots.txt, Hash Cracking and Path Traversal - Pizza Paradise [INTIGRITI 1337UP CTF 2024]
5:05
Robots.txt, Hash Cracking and Path Traversal - Pizza Paradise [INTIGRITI 1337UP CTF 2024]
Buffer Overflow: Overwriting Stack Variables - Rigged Slot Machine [INTIGRITI 1337UP CTF 2024]
13:24
Buffer Overflow: Overwriting Stack Variables - Rigged Slot Machine [INTIGRITI 1337UP CTF 2024]
Hacking Unity Games with Cheat Engine and dnSpy - Bug Squash (part 1) [INTIGRITI 1337UP CTF 2024]
6:52
Hacking Unity Games with Cheat Engine and dnSpy - Bug Squash (part 1) [INTIGRITI 1337UP CTF 2024]
Decoding Spotify Barcodes - Defcon 32 Coin Challenge Solution [2024]
25:19
Decoding Spotify Barcodes - Defcon 32 Coin Challenge Solution [2024]
XSS via CSPT and Open Redirect - Solution to August '24 Challenge (Defcon)
30:31
XSS via CSPT and Open Redirect - Solution to August '24 Challenge (Defcon)
Intigriti Kick off 2024
2:57
Intigriti Kick off 2024
Exploiting Insecure Output Handling in LLMs
12:58
Exploiting Insecure Output Handling in LLMs
Indirect Prompt Injection
11:32
Indirect Prompt Injection
Exploiting Vulnerabilities in LLM APIs
5:41
Exploiting Vulnerabilities in LLM APIs
Exploiting LLM APIs with Excessive Agency
9:28
Exploiting LLM APIs with Excessive Agency
Intigriti Customer Story: Personio
3:07
Intigriti Customer Story: Personio
Performing CSRF Exploits Over GraphQL
10:36
Performing CSRF Exploits Over GraphQL
Misconfig Mapper - Hacker Tools
4:53
Misconfig Mapper - Hacker Tools
Bypassing GraphQL Brute Force Protections
7:12
Bypassing GraphQL Brute Force Protections
Finding a Hidden GraphQL Endpoint
7:51
Finding a Hidden GraphQL Endpoint
Accidental Exposure of Private GraphQL Fields
5:05
Accidental Exposure of Private GraphQL Fields