gr3pme

gr3pme

HackerNotes Author || Bug Bounty Hunter

[HackerNotes Ep.95 & Ep.96] Cookies, Caching & Attacking Chrome Extensions with MatanBer

[HackerNotes Ep.95 & Ep.96] Cookies, Caching & Attacking Chrome Extensions with MatanBer

We've got a HUGE double whammy HackerNotes. How to attack Chrome Extensions, understanding the extension threat model and diving deep into extension components. Then we finish off with a bunch of cool cookie parsing behaviours along with some clientside gadgets from the HeroV6 CTF writeup by Kevin Mizu.

gr3pme
gr3pme
[HackerNotes Ep.93] A Chat with Dr. Bouman - Life as a Hacker and a Doctor

[HackerNotes Ep.93] A Chat with Dr. Bouman - Life as a Hacker and a Doctor

In this week's HackerNotes, we cover Dr. Jonathan Bouman and his unique journey as both a Hacker and a Healthcare Professional. We've got some tips for long-term hunting and some prior experiences he’s had with Amazon's bug bounty program alongside some cool bugs.

gr3pme
gr3pme
[HackerNotes Ep.91] Zero to LHE in 9 Months (feat gr3pme)

[HackerNotes Ep.91] Zero to LHE in 9 Months (feat gr3pme)

Justin Gardner and gr3pme talk about his journey with Bug Bounty. We cover LHEs, tips for picking and unlocking targets, how to approach a target and a bunch of bugs ranging from ATO in a fintech provider, 0 user interaction ATO and abusing development environments in chains. Check it out below.

gr3pme
gr3pme
[HackerNotes Ep.90] 5k Clickjacking, Encryption Oracles, and Cursor for PoCs

[HackerNotes Ep.90] 5k Clickjacking, Encryption Oracles, and Cursor for PoCs

Using Cursor for POC creation, fresh research with some SQLi, encryption Oracles, file upload content types for XSS and a $5k clickjacking bounty on Google with a bunch of neat gadgets. Check it out below.

gr3pme
gr3pme
[HackerNotes Ep.89] The Untapped Bug Bounty Landscape of IoT w/ Matt Brown

[HackerNotes Ep.89] The Untapped Bug Bounty Landscape of IoT w/ Matt Brown

Justin and Matt Brown discuss all things IoT, including the specializations and challenges in hardware hacking, Matt’s personal Methodology, what hardware you'll need to get started and a whole lot more. Check it out below!

gr3pme
gr3pme
[HackerNotes Ep.88] News, Tools, and Writeups

[HackerNotes Ep.88] News, Tools, and Writeups

We're back and ready to deliver a bunch of new research including a new cheat sheet for URL validation bypass from Portswigger, the introduction of Sanic DNS as a high-speed DNS resolver, xsstools, WordPress POP to RCE, abusing CORs and the dockerization of Orange's Confusion Attacks, plus a lot more. This episode was written by Yujilik.

gr3pme
gr3pme
[HackerNotes Ep.86] The X-Correlation between Frans & RCE - Research Drop

[HackerNotes Ep.86] The X-Correlation between Frans & RCE - Research Drop

Frans Rosen and Justin sit down to discuss and drop gold on X-correlation injection, with impacts and POCs ranging from JSON injection to RCE.

gr3pme
gr3pme
[HackerNotes Ep.85] Practical Applications of DEFCON 32 Web Research

[HackerNotes Ep.85] Practical Applications of DEFCON 32 Web Research

The team are back with a whole bunch of tips and tricks off of the back of the research dropped at Defcon.

gr3pme
gr3pme
[HackerNotes Ep.84] 0xLupin & Takeaways from Google's Las Vegas BugSwat

[HackerNotes Ep.84] 0xLupin & Takeaways from Google's Las Vegas BugSwat

In this HackerNotess, Justin and Roni Carta (@0xLupin) discuss their MVH win at the recent Google LHE, and drop some valuable takeaways from the event.

gr3pme
gr3pme
[HackerNotes Ep.81] Crushing Client-Side on Any Scope with MatanBer

[HackerNotes Ep.81] Crushing Client-Side on Any Scope with MatanBer

MatanBer and Justin dropped a tonne of tips and tricks on client-side hacking and using DevTools effectively, as well as some recent POCs to escalate self XSS.

gr3pme
gr3pme