Yujilik

Dec 14, 2024

[HackerNotes Ep.101] AI Attack Vectors - CTBB Hijacked - Rez0__ and Johann

In this HackerNotes, Rez0 joins Johann Rehberger to explore the complexities of AI application vulnerabilities. They dive into the significance of system prompts, obfuscation techniques to bypass security, and discuss the top AI platforms shaping the future of AI security.

Yujilik

Nov 30, 2024

[HackerNotes Ep.99] Back to the Basics - Web Fundamental to 100k a Year in Bug Bounty

In this HackerNotes, we've got Roni and Justin dissecting an old thread of Justin's, breaking down how best to start bug bounty with the goal of making $100k in the first year.

Yujilik

Nov 17, 2024

[HackerNotes Ep.97] Bcrypt Hash Input Truncation & Mobile Device Threat Modeling

We're back with some cool news items, including a recent Okta Bcrypt vulnerability, insights into crypto bugs, and some intricacies of Android and Chrome security. We also explore the latest research from Portswigger on payload concealment techniques, and the introduction of the Lightyear tool for PHP exploits.

Yujilik

Oct 25, 2024

[HackerNotes Ep.94] Zendesk Fiasco & the CTBB Naughty List

In this week's HackerNotes, we dive into the recent Zendesk fiasco and the ethical considerations surrounding it. We also have the launch of AuthzAI and some research from Ophion Security.

Yujilik

Oct 14, 2024

[HackerNotes Ep.92] SAML XPath Confusion, Chinese DNS Poisoning, and AI-Powered 403 Bypasser

This weeks HackerNotes has dropped covering a bunch of new research. We've got SAML XPath confusion, some AssetNote research,WAF bypasses and a whole lot more. Check it out below!

Yujilik