Archive

HackerNotesHackerNotes
+2+2
[HackerNotes Ep. 200] Cloud Hacking from the Data Plane, Client-Side RCE, and Identity Confusion with 7urb0

[HackerNotes Ep. 200] Cloud Hacking from the Data Plane, Client-Side RCE, and Identity Confusion with 7urb0

A practical method for hunting cloud services from the inside out, from client-side bugs and sandbox escapes to control-plane trust, delegated identities, and public object XSS.

[HackerNotes Ep. 199] Web Hackers Go Hardware: An IoT LHE Debrief

[HackerNotes Ep. 199] Web Hackers Go Hardware: An IoT LHE Debrief

A little retex about the latest IoT LHE

Aituglo ‎
Aituglo ‎
HackerNotesHackerNotes
+2+2
[HackerNotes Ep. 198] Halloween Bug Stories: Shameful Sandboxes, Null-Origin Frames, and SQLi to ASPX RCE

[HackerNotes Ep. 198] Halloween Bug Stories: Shameful Sandboxes, Null-Origin Frames, and SQLi to ASPX RCE

Justin, Joseph, Ads, and XSS Doctor swap the bugs that still bother them, from exposed patient records to AI sandboxes full of other users' secrets and an agent that rewrote production on its way to RCE.

[HackerNotes Ep. 197] Local Hackbots, Better Harnesses, CrowdRecon, and Race Conditions

[HackerNotes Ep. 197] Local Hackbots, Better Harnesses, CrowdRecon, and Race Conditions

A practical look at local AI for bug hunting, specialized agents, verification, reconnaissance, and the hardware trade-offs behind modern hackbot workflows.

[HackerNotes Ep. 196] The Future of Bug Bounty and Pentesting with rez0 and gr3pme

[HackerNotes Ep. 196] The Future of Bug Bounty and Pentesting with rez0 and gr3pme

The future of bug bounty and pentesting, local AI, and models that won't cooperate.

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 195] Frans Rosen on AI Dupes, Impact Bumping, and Staying Connected to the Bug

[HackerNotes Ep. 195] Frans Rosen on AI Dupes, Impact Bumping, and Staying Connected to the Bug

Discussing with a OG hacker about the new AI era in the Bug Bounty scene

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 194] Jev the Ranker, HTTP/3 Brute Force, and the Bug Bounty Doom Spiral

[HackerNotes Ep. 194] Jev the Ranker, HTTP/3 Brute Force, and the Bug Bounty Doom Spiral

Checking the news with new models and the shift in Bug Hunting

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 193] Browser Quirks Galore with J0R1AN

[HackerNotes Ep. 193] Browser Quirks Galore with J0R1AN

Digging new research with J0r1an

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 192] Masterclass: Building a POC Creation Skill

[HackerNotes Ep. 192] Masterclass: Building a POC Creation Skill

A little overview of a Masterclass about building a PoC Skill

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 191] Cache-Timing Exfil, Tab-Unders, and Buying Local Hardware

[HackerNotes Ep. 191] Cache-Timing Exfil, Tab-Unders, and Buying Local Hardware

Digging a nice technique to exfiltrate data using cache, and some ideas if you want to buy local hardware for AI

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 190] Where to Point Your Tokens: Cloud Providers, Auth Bypass, and AI Hacking

[HackerNotes Ep. 190] Where to Point Your Tokens: Cloud Providers, Auth Bypass, and AI Hacking

Today, we look at the switch from Claude to Codex for a lot of users and where to properly use your tokens

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 189] What Happened to HackerOne? with Joel Margolis

[HackerNotes Ep. 189] What Happened to HackerOne? with Joel Margolis

Nostalgia for the golden era, frustration with the AI mess, and the one problem worth fixing: why Joel thinks HackerOne lost the plot, and how it gets it back.

Aituglo ‎
Aituglo ‎
FirstBack
12345678
Next Last