Fulltime Bug Hunter
A $15k client-side chain, an "impossible" XSS lab finally solved, and why hardened AI features are worth the harness.
Today, we dig some interesting bugs found by our agents and some tips to improve your setup
We dig deep some features of Singularity, the hackbot Rez0 and xssdoctor built
Steve Hernandez breaks down the Bug Bounty Maturity Framework
Today, we're giving some tips to stay motivated in the AI Era
Brutecat breaks down how he built an AI-powered pipeline that scanned 14,000 Google APIs and earned $670,000 in bounties in under four months. The full methodology, the tooling, and the bugs.
First part of two awesome episodes with brutecat, this one about the two RCE he founds and some other bugs when he started digging Google VRP
Today, we deep dive AEM with Jim Green
Some nice bugs covered about AI Injection and CSPT, and tricks to level up your hackbot
A lot of great writeups today and some AI news
![[HackerNotes Ep. 183] CSPT to ATO, a Prototype Chain 2FA Bypass, and Impossible XSS Lab Falling](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=800,height=421,fit=scale-down,onerror=redirect/uploads/publication/logo/f3cc9f6e-341e-452a-9b50-a244bcc4cf92/Critical_Thinking_Podcast_Cover_Square.jpg){kind=logo}
