Archive

HackerNotesHackerNotes
+2+2
[HackerNotes Ep. 198] Halloween Bug Stories: Shameful Sandboxes, Null-Origin Frames, and SQLi to ASPX RCE

[HackerNotes Ep. 198] Halloween Bug Stories: Shameful Sandboxes, Null-Origin Frames, and SQLi to ASPX RCE

Justin, Joseph, Ads, and XSS Doctor swap the bugs that still bother them, from exposed patient records to AI sandboxes full of other users' secrets and an agent that rewrote production on its way to RCE.

[HackerNotes Ep. 197] Local Hackbots, Better Harnesses, CrowdRecon, and Race Conditions

[HackerNotes Ep. 197] Local Hackbots, Better Harnesses, CrowdRecon, and Race Conditions

A practical look at local AI for bug hunting, specialized agents, verification, reconnaissance, and the hardware trade-offs behind modern hackbot workflows.

[HackerNotes Ep. 196] The Future of Bug Bounty and Pentesting with rez0 and gr3pme

[HackerNotes Ep. 196] The Future of Bug Bounty and Pentesting with rez0 and gr3pme

The future of bug bounty and pentesting, local AI, and models that won't cooperate.

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 195] Frans Rosen on AI Dupes, Impact Bumping, and Staying Connected to the Bug

[HackerNotes Ep. 195] Frans Rosen on AI Dupes, Impact Bumping, and Staying Connected to the Bug

Discussing with a OG hacker about the new AI era in the Bug Bounty scene

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 194] Jev the Ranker, HTTP/3 Brute Force, and the Bug Bounty Doom Spiral

[HackerNotes Ep. 194] Jev the Ranker, HTTP/3 Brute Force, and the Bug Bounty Doom Spiral

Checking the news with new models and the shift in Bug Hunting

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 193] Browser Quirks Galore with J0R1AN

[HackerNotes Ep. 193] Browser Quirks Galore with J0R1AN

Digging new research with J0r1an

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 192] Masterclass: Building a POC Creation Skill

[HackerNotes Ep. 192] Masterclass: Building a POC Creation Skill

A little overview of a Masterclass about building a PoC Skill

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 191] Cache-Timing Exfil, Tab-Unders, and Buying Local Hardware

[HackerNotes Ep. 191] Cache-Timing Exfil, Tab-Unders, and Buying Local Hardware

Digging a nice technique to exfiltrate data using cache, and some ideas if you want to buy local hardware for AI

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 190] Where to Point Your Tokens: Cloud Providers, Auth Bypass, and AI Hacking

[HackerNotes Ep. 190] Where to Point Your Tokens: Cloud Providers, Auth Bypass, and AI Hacking

Today, we look at the switch from Claude to Codex for a lot of users and where to properly use your tokens

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 189] What Happened to HackerOne? with Joel Margolis

[HackerNotes Ep. 189] What Happened to HackerOne? with Joel Margolis

Nostalgia for the golden era, frustration with the AI mess, and the one problem worth fixing: why Joel thinks HackerOne lost the plot, and how it gets it back.

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 188] DEF CON War Stories: Chat XSS to Spyware, Token Shuffles, and Camera Hijacks

[HackerNotes Ep. 188] DEF CON War Stories: Chat XSS to Spyware, Token Shuffles, and Camera Hijacks

What came up in a hotel room at DEF CON, from stored XSS to cloud pivots

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 187] Dupes, Harnesses of Harnesses, and Internet Melting Bugs

[HackerNotes Ep. 187] Dupes, Harnesses of Harnesses, and Internet Melting Bugs

How AI turned depth into a commodity, why dupes are exploding, and the harness moves that still give you an edge.

Aituglo ‎
Aituglo ‎
FirstBack
12345678
Next Last