gr3pme

gr3pme

HackerNotes Author || Bug Bounty Hunter

[HackerNotes Ep.102] Building Web Hacking Micro Agents with Jason Haddix

[HackerNotes Ep.102] Building Web Hacking Micro Agents with Jason Haddix

In this HackerNotes, we've got Justin and Jason Haddix diving into AI Micro-Agents for Hacking: From Web Fuzzing to WAF Bypasses, effective prompting tips and a whole lot of LLM content. Check it out below.

gr3pme
gr3pme
[HackerNotes Ep.100] 8 Fav Bugs of 2024, Farewell Joel, Hello Shift - Cursor of Hacking

[HackerNotes Ep.100] 8 Fav Bugs of 2024, Farewell Joel, Hello Shift - Cursor of Hacking

It's the 100th episode! We've got some of the top hunters together to discuss their top bugs of 2024. We've also got a big CTBB pod announcement and a new (game-changer) plugin for Caido; Shift.

gr3pme
gr3pme
[HackerNotes Ep.98] Team 82 Sharon Brizinov - The Live Hacking Polymath

[HackerNotes Ep.98] Team 82 Sharon Brizinov - The Live Hacking Polymath

We've got some cool war stories from Sharon, the differences between HackerOne and Pwn2Own, pwning OT/IoT devices, some high level methodologies and some approaches to more exotic attack surfaces in this HackerNotes.

gr3pme
gr3pme
[HackerNotes Ep.95 & Ep.96] Cookies, Caching & Attacking Chrome Extensions with MatanBer

[HackerNotes Ep.95 & Ep.96] Cookies, Caching & Attacking Chrome Extensions with MatanBer

We've got a HUGE double whammy HackerNotes. How to attack Chrome Extensions, understanding the extension threat model and diving deep into extension components. Then we finish off with a bunch of cool cookie parsing behaviours along with some clientside gadgets from the HeroV6 CTF writeup by Kevin Mizu.

gr3pme
gr3pme
[HackerNotes Ep.93] A Chat with Dr. Bouman - Life as a Hacker and a Doctor

[HackerNotes Ep.93] A Chat with Dr. Bouman - Life as a Hacker and a Doctor

In this week's HackerNotes, we cover Dr. Jonathan Bouman and his unique journey as both a Hacker and a Healthcare Professional. We've got some tips for long-term hunting and some prior experiences he’s had with Amazon's bug bounty program alongside some cool bugs.

gr3pme
gr3pme
[HackerNotes Ep.91] Zero to LHE in 9 Months (feat gr3pme)

[HackerNotes Ep.91] Zero to LHE in 9 Months (feat gr3pme)

Justin Gardner and gr3pme talk about his journey with Bug Bounty. We cover LHEs, tips for picking and unlocking targets, how to approach a target and a bunch of bugs ranging from ATO in a fintech provider, 0 user interaction ATO and abusing development environments in chains. Check it out below.

gr3pme
gr3pme
[HackerNotes Ep.90] 5k Clickjacking, Encryption Oracles, and Cursor for PoCs

[HackerNotes Ep.90] 5k Clickjacking, Encryption Oracles, and Cursor for PoCs

Using Cursor for POC creation, fresh research with some SQLi, encryption Oracles, file upload content types for XSS and a $5k clickjacking bounty on Google with a bunch of neat gadgets. Check it out below.

gr3pme
gr3pme
[HackerNotes Ep.89] The Untapped Bug Bounty Landscape of IoT w/ Matt Brown

[HackerNotes Ep.89] The Untapped Bug Bounty Landscape of IoT w/ Matt Brown

Justin and Matt Brown discuss all things IoT, including the specializations and challenges in hardware hacking, Matt’s personal Methodology, what hardware you'll need to get started and a whole lot more. Check it out below!

gr3pme
gr3pme
[HackerNotes Ep.88] News, Tools, and Writeups

[HackerNotes Ep.88] News, Tools, and Writeups

We're back and ready to deliver a bunch of new research including a new cheat sheet for URL validation bypass from Portswigger, the introduction of Sanic DNS as a high-speed DNS resolver, xsstools, WordPress POP to RCE, abusing CORs and the dockerization of Orange's Confusion Attacks, plus a lot more. This episode was written by Yujilik.

gr3pme
gr3pme
[HackerNotes Ep.86] The X-Correlation between Frans & RCE - Research Drop

[HackerNotes Ep.86] The X-Correlation between Frans & RCE - Research Drop

Frans Rosen and Justin sit down to discuss and drop gold on X-correlation injection, with impacts and POCs ranging from JSON injection to RCE.

gr3pme
gr3pme