Bug Bytes #208 – Burp gets an update, Sharefile gets a CVE and JavaScript files get analysed

By travisintigriti

July 19, 2023

Last updated on August 8, 2026

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

This issue covers the week from July 10th – July 16th

CLICK HERE TO SUBSCRIBE

Intigriti News

From my notebook

  1. Improve your API Security Testing with Burp BCheck Scripts

  2. Introducing jswzl: In-depth JavaScript analysis for web security testers

  3. Exploiting XSS in hidden inputs and meta tags

  4. Using MiTMProxy as a scriptable pre-proxy for BurpSuite

  5. Encrypted Doesn’t Mean Authenticated: ShareFile RCE (CVE-2023-24489)

You may also like

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: A full Microsoft Edge exploit chain using only logic bugs 1-click RCE in Discord via Twitch embed $250K Chrome full-chain bounty in just 6 days XSS in Cloudflare's image endpoint via SVG sanitizer bypass $90K Goog

Read more: Intigriti Bug Bytes #241 - October 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Compromising OpenAI, Slack, Meta, and more via a vulnerable image library Hacking OpenAI employee accounts in under 72 hours Breaking into Google's GFile for $100K Hacking AI CX agents Turbo Intruder 2 surpassing

Read more: Intigriti Bug Bytes #240 - September 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: Intigriti as the new provider for Adobe's Bug Bounty Program CSS injection as an attack vector inside your email inbox AI doing novel security research: the HTTP Terminator 169 offensive recon skills in one AI-ready

Read more: Intigriti Bug Bytes #239 - August 2026 🚀