Case Study: Dropbox boosts web security skills with PortSwigger's Web Security Academy

Dropbox earns first bug bounty in 2016 with PortSwigger-inspired web security training

PortSwigger's customer, Dropbox, benefited from the security research of a dedicated ethical hacker. Kamil Vavra, an Application Security Engineer, identified a unique file extension spoofing vulnerability (right-to-left override) within Dropbox's systems, highlighting a potential security challenge for the company.

The solution was implemented by PortSwigger through its free Web Security Academy and Burp Suite Professional tool. Kamil used these resources to discover and report the vulnerability. As a result, Dropbox was able to quietly issue a fix for the security flaw. For Kamil, this success led to him receiving a bug bounty and, more significantly, an invitation to a private security program, which greatly accelerated his career in bug bounty hunting.

Dropbox