Aituglo ‎

Aituglo ‎

Fulltime Bug Hunter

[HackerNotes Ep. 177] Double Google RCE with VRP Legend Brutecat

[HackerNotes Ep. 177] Double Google RCE with VRP Legend Brutecat

First part of two awesome episodes with brutecat, this one about the two RCE he founds and some other bugs when he started digging Google VRP

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 176] AEM Deep Dive with Jim Green: Sling Selectors, Dispatcher Bypasses, and XSS Gadgets

[HackerNotes Ep. 176] AEM Deep Dive with Jim Green: Sling Selectors, Dispatcher Bypasses, and XSS Gadgets

Today, we deep dive AEM with Jim Green

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 175] Wormable AI Q-Param Injections, Mobile CSPT, and the Hackbot Arms Race

[HackerNotes Ep. 175] Wormable AI Q-Param Injections, Mobile CSPT, and the Hackbot Arms Race

Some nice bugs covered about AI Injection and CSPT, and tricks to level up your hackbot

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 174] Crypto Oracles, cPanel Auth Bypass, and the .git Trick That Pops Google Cloud

[HackerNotes Ep. 174] Crypto Oracles, cPanel Auth Bypass, and the .git Trick That Pops Google Cloud

A lot of great writeups today and some AI news

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 173] Bug Bounty: Is It Dead, or Are We Just Getting Started?

[HackerNotes Ep. 173] Bug Bounty: Is It Dead, or Are We Just Getting Started?

Bug bounty isn't dead, but it's definitely changing a lot. Here's what's actually changing.

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 171] Protobuf XSS, Cookie Case Sensitivity, and Clickjacking Tricks

[HackerNotes Ep. 171] Protobuf XSS, Cookie Case Sensitivity, and Clickjacking Tricks

Solo episode from Justin looking at some recent bugs he found about client side stuff

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 170] Live From South Korea : AI Exfiltration, SDK Hacking, and the Art of Self-Advocacy

[HackerNotes Ep. 170] Live From South Korea : AI Exfiltration, SDK Hacking, and the Art of Self-Advocacy

New live episode from South Korea to cover the latest LHE by Hackerone and by Google

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 169] OAuth 2.1, MCP Authorization Security, and the Framework CVEs You Should Know

[HackerNotes Ep. 169] OAuth 2.1, MCP Authorization Security, and the Framework CVEs You Should Know

A practical look at OAuth 2.1 and MCP security pitfalls, from PKCE downgrades and SSRF tricks to token misuse and recent framework CVEs.

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 168] Client-Side Path Traversals Across Every Framework, with XSSDoctor

[HackerNotes Ep. 168] Client-Side Path Traversals Across Every Framework, with XSSDoctor

We dig CSPT across different frameworks with xssdoctor, discovering a nice bug in react router

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 167] Acquisition Hunting, Supply Chain Bugs & Research Theft with krevetk0

[HackerNotes Ep. 167] Acquisition Hunting, Supply Chain Bugs & Research Theft with krevetk0

Today, a new episode about research theft with krevetk0

Aituglo ‎
Aituglo ‎