#bugbounty

I have spent my recent time developing a tool called pynumerate. Pynumerate is a osint tool made to...

For a while my bug bounty routine had this dumb little ritual in it. Every few days I'd open a dozen...

Most of my best findings did not start with a plan. They started with me breaking something, watching...

How a Fox and a Single Quote Broke the Critter Gallery — SQLi in Intigriti Challenge...

A few days ago I jumped back into a bug bounty program after being away for a while. Like a lot of...

Turso retired its $1,000-per-bug bounty program this week after AI-generated submissions overwhelmed the maintainers. The pattern is going to repeat everywhere there's an open queue with a human at the end of it.

In late July, three security researchers at a small firm called Hacktron spent 72 hours doing...

An IP address can reveal useful information about a network, server, or internet connection. During...

My Bug Hunting Playbook: 8 Bugs, 5 OSS Repos, 24 Hours TL;DR I found and...

Acabei de passar meu novo artigo do Medium para o GitHub, onde todos conseguem ler melhor, sem...

The 28% Cost Bug: How a Single Character Broke Claude 3 Haiku Cache Pricing The...

The API had already been through a round of testing. Someone tried the obvious thing first: change...