Aituglo ‎

Aituglo ‎

Fulltime Bug Hunter

[HackerNotes Ep. 174] Crypto Oracles, cPanel Auth Bypass, and the .git Trick That Pops Google Cloud

[HackerNotes Ep. 174] Crypto Oracles, cPanel Auth Bypass, and the .git Trick That Pops Google Cloud

A lot of great writeups today and some AI news

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 173] Bug Bounty: Is It Dead, or Are We Just Getting Started?

[HackerNotes Ep. 173] Bug Bounty: Is It Dead, or Are We Just Getting Started?

Bug bounty isn't dead, but it's definitely changing a lot. Here's what's actually changing.

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 171] Protobuf XSS, Cookie Case Sensitivity, and Clickjacking Tricks

[HackerNotes Ep. 171] Protobuf XSS, Cookie Case Sensitivity, and Clickjacking Tricks

Solo episode from Justin looking at some recent bugs he found about client side stuff

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 170] Live From South Korea : AI Exfiltration, SDK Hacking, and the Art of Self-Advocacy

[HackerNotes Ep. 170] Live From South Korea : AI Exfiltration, SDK Hacking, and the Art of Self-Advocacy

New live episode from South Korea to cover the latest LHE by Hackerone and by Google

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 169] OAuth 2.1, MCP Authorization Security, and the Framework CVEs You Should Know

[HackerNotes Ep. 169] OAuth 2.1, MCP Authorization Security, and the Framework CVEs You Should Know

A practical look at OAuth 2.1 and MCP security pitfalls, from PKCE downgrades and SSRF tricks to token misuse and recent framework CVEs.

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 168] Client-Side Path Traversals Across Every Framework, with XSSDoctor

[HackerNotes Ep. 168] Client-Side Path Traversals Across Every Framework, with XSSDoctor

We dig CSPT across different frameworks with xssdoctor, discovering a nice bug in react router

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 167] Acquisition Hunting, Supply Chain Bugs & Research Theft with krevetk0

[HackerNotes Ep. 167] Acquisition Hunting, Supply Chain Bugs & Research Theft with krevetk0

Today, a new episode about research theft with krevetk0

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 166] Claude Code Skills for Bug Bounty: When, Why, and How to Build Them

[HackerNotes Ep. 166] Claude Code Skills for Bug Bounty: When, Why, and How to Build Them

Exploring how Rez0 use Claude code to hunt and how to properly set it up

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 165] Protobuf Hacking, AI-Powered Bug Hunting, and Self-Improving Claude Workflows

[HackerNotes Ep. 165] Protobuf Hacking, AI-Powered Bug Hunting, and Self-Improving Claude Workflows

Today, we are digging some protobuf stuff, and also talking about the current debate about AI finding bugs and how to use it properly

Aituglo ‎
Aituglo ‎
[HackerNotes Ep. 164] Tommy DeVoss: From Black Hat to Bug Bounty LEGEND

[HackerNotes Ep. 164] Tommy DeVoss: From Black Hat to Bug Bounty LEGEND

Justin sits down with Tommy DeVoss to talk about his origin story, Yahoo bugs, and how Tommy first got Justin into Bug Bounty

Aituglo ‎
Aituglo ‎