BBNW

BBNW has been a member of Linktree for 8 months and joined in November 2025. The social media accounts linked to from BBNW are: • Instagram • TikTok • YouTube • X Besides social media accounts, krnpt0s has populated their site with: • .:: Phrack Magazine ::. • Burp Suite Organizer. Lo que todo Bug Bounty Hunter Necesitaba • Ciberseguridad para Mortales - Charlamos con Ignacio Sbampato #TeamInvierno #HackThePlanet • hakluke / Are bug bounties cooked? • GLOSSOPETRAE v3.1 - Procedural Xenolinguistics Engine • GitHub - zhaoxuya520/reverse-skill: Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline • Exploiting Auth0 Defaults in XSS Attacks - elttam • openai.com • Bug Bounty Insights & Tips | Intigriti • DEFCON2026 – Electronic Cats • MELI Hacking Event 8.8 UNREAL Las Vegas • Intigriti June Bonus Challenge • Blog de Ciberseguridad | ThreatX Security | ThreatX Security • GitHub - 4osp3l/Main-App-Hacking-CheckList: My Main App Hacking CheckList · GitHub • Radar by Jsmon — Free Domain & URL Recon Tool | Security Reconnaissance • Caido • GitHub - crussella0129/tricorne: a Fedora remix focused on pentesting and purple hat tooling · GitHub • GitHub - PurpleAILAB/Decepticon: Autonomous Hacking Agent for Red Team · GitHub • Savant: Bugcrowd's AI strategy for preemptive security | @Bugcrowd • How to hack with LLMs, agentic CLIs, MCP servers | YesWeHack • Posts – PNC Blog • GitHub - chompie1337/s8_2019_2215_poc: PoC 2019-2215 exploit for S8/S8 active with DAC + SELinux + Knox/RKP bypass · GitHub • humiliating iis servers for fun and jail time • Client-side Authentication Bypass :: kuldeepdotexe's blog • The gift that keeps giving: Exploiting Git Integrations in Cloud Services · Arbitrary • I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. | bobdahacker • Bugs & Talks - #2 Jessica Pérez (@jessuwu) • How I Made $30,000 Hacking Broken Access Control • Internet muerto: empresas contaminan Reddit para manipular resultados de Google y respuestas de ChatGPT • Securing the uncharted territories of AI systems. A discussion with Leo Racanelli • Le deuxième acte : la chimère au BreizhCTF – 7h30th3r0n3 • Analysis of CVE-2026-45595 MOTW Bypass by Opus 4.8 · GitHub • Nightmare Eclipse • N-days \ red.anthropic.com • From Default IIS Page to Critical SQL Injection | by Ahmad Mugh33ra | Medium • GitHub - s0xDk/ghostty-blackhole: Ghostty Blackhole puts a real, ray-traced black hole inside your terminal. It grows as Claude Code's context window fills up, live. A fresh session is a quiet hole in the corner. A full one swallows half your screen. You' • GitHub - microsoft/SkillOpt: SkillOpt is a text-space optimizer that trains reusable natural-language skills for frozen LLM agents through trajectory-driven edits, validation-gated updates, and deployable best_skill.md artifacts. · GitHub • [2605.23904] SkillOpt: Executive Strategy for Self-Evolving Agent Skills • GitHub - elder-plinius/OBLITERATUS: OBLITERATE THE CHAINS THAT BIND YOU · GitHub • HackingDave Model Regression • ModelRegression.com — AI Model Performance Tracker • HackerOne Training AI on Bug Bounty Data? (Ep. 162) • Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257) • The Newest Instagram "Exploit" is the Goofiest I've Seen | Sid's Blog • Account Takeover using SSO Logins | by Rikesh Baniya | Medium • SAML Username Collision Leading to Full ATO | by M0n3m | May, 2026 | Medium • I Found a Critical Vulnerability — They Paid Me $15,500 | by cyber security | May, 2026 | Medium • Grafana to 507 Meta Repos: A $157K Bug Chain | Sectricity • pingback.sh — out-of-band callback service for bug bounty hunters • BSides Porto 2026 | Cybersecurity Conference • Home - Women's International Cybersecurity Challenge 2026 • leHACK 2026 - BRAVE new WORLD - leHACK • Hackअस्त्र 2026 — Cybersecurity from Passion to Profession • Tech Week 2026 • How “Clinejection” Turned an AI Bot into a Supply Chain Attack | Snyk • How a Single @ Symbol Turned Into a 1-Click Account Takeover • Red-Teaming Cloud Infrastructure with Neo — ProjectDiscovery Blog • From Homeless to $1.4M: How a 21 Year Old is Rewriting the Rules of Bug Bounty • GitHub - hahwul/dalfox: 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation. · GitHub • GitHub - ommirkute/BurpMax: BurpMax - Burp Suite extension that brings Pro-grade active scanning (24 probes), passive analysis (13 checkers), OOB detection, WAF evasion, and PDF/DOCX report generation to Community Edition users. · GitHub • GitHub - D4Vinci/Scrapling: 🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl! · GitHub • Vigolium - Find the security bugs code review and traditional scanners miss, with validated proof your team can act on • GitHub - aliasrobotics/cai: Cybersecurity AI (CAI), the framework for AI Security · GitHub • GitHub - jsmonhq/apiffuf: API URL fuzzer that cross-joins hosts and paths into normalized URLs, probes them over HTTP, and reports responding endpoints. · GitHub • GitHub - ShulkwiSEC/bb-huge: bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents · GitHub • GitHub - arshadkazmi42/strix-claude-code · GitHub • PwnBox - Competitive Security Challenge Arena • Hackflix – Security Conference Videos • EKOPARTY MIAMI 2026 - VLOG • The down fall of bug bounties • Wrapping Up Pwn2Own Berlin 2026: The Final Numbers • Zero Day Initiative — Pwn2Own Berlin 2026: Day Three Results and Master of Pw • GitHub - H-mmer/pentest-agents: Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder. · GitHub • GitHub - vitorfhc/Interceptor: Agent-driven Chrome extension for full browser control via CLI · GitHub • GitHub - bountyyfi/lonkero: Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust. · GitHub • Día 2 - Meta Bug Bounty Researcher Conference - Taipei • Hacking, Premios y Cenas Rarísimas 🇹🇼 | Dentro del Meta Bug Bounty Researcher Conference • GitHub - AnLoMinus/Bug-Bounty: Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More · GitHub • GitHub - shadowsock5/Poc: PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus · GitHub • GitHub - tstephens1080/palo-alto-cve-2026-0265-checker: Python script to sweep a fleet of Palo Alto firewalls and Panoramas via SSH, check PAN-OS version against CVE-2026-0265 (Authentication Bypass via Cloud Authentication Service), detect whether CAS is • CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS • CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled • nxenon (Amin Nasiri) · GitHub • QUIC-er Races: HTTP/3 won’t save you from TOCTOU vulnerabilities | International Journal of Information Security | Springer Nature Link • Dentro del Meta Bug Bounty Researcher Conference 🇹🇼 Día 1 en Taipei • The Bug Bounty Roadmap I'd Follow If I Started Over (With AI) • SpecterOps - Creators of BloodHound | Leaders in Identity Attack Path Management • rand0m_unk0wn | random-unknown-username • bugcrowd.com • Ekoparty Miami | ekoparty • TICKETS EKOPARTY MIAMI 2026 Tickets, Thursday, May 21-Friday, May 22 • 8 AM-5 PM | Eventbrite • GitHub - ZeroPathAI/opus-benchmark: Code for our opus 4.6 vulnerability detection benchmark · GitHub • GitHub - dwisiswant0/next-16.2.4-pocs: Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, • Common Mistakes Beginners Make in Bug Reports - Bugv Blog • Writeups | Vulnerabilities affecting the web platform • GitHub - jthack/claude-goal: Codex-style /goal command for Claude Code · GitHub • GitHub - 404-src/CVE-2026-34486: Apache Tomcat EncryptInterceptor Bypass → Unauthenticated RCE (CVE-2026-34486) · GitHub • GitHub - rarecoil/unwebpack-sourcemap: Extract uncompiled, uncompressed SPA code from Webpack source maps. · GitHub • GitHub - orwagodfather/WordList · GitHub • Kurate.org — AI Paper Rankings • Honorable Mentions | Google Bug Hunters • Labs de Bug Bounty Reales — Practica con Reportes de HackerOne | BBLabs • PentesterLab: Penetration Testing & Web App Security Blog • Network and Distributed System Security (NDSS) Symposium • Spaceraccoon's Blog • Burp extensions - PortSwigger • Autonomous Vulnerability Hunting with MCP • Bug Bounty Maturity Framework • GitHub - chAng-L19/codex-redteam-optin-mode: 针对于红队攻击思维做出的red team模式(让你的codex像红队一样思考！)，可在单对话使用（可自行适配其他AI） · GitHub • runreaper.com • GitHub - matty69v/Bug-Bounty-Agents: AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes · GitHub • GitHub - soxoj/sharetrace: 🎭 Reveal the identity behind a share link · GitHub • GitHub - nullthrix/BugBounty-Methodology · GitHub • cvemap overview - ProjectDiscovery Documentation • GitHub - projectdiscovery/vulnx: Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities. · GitHub • How I Found a Critical Bug Using Claude Desktop (Free) | by Red Darkin | Apr, 2026 | Medium • Attackers Exploit DVR Command Injection Flaw to Deploy Botnet - Infosecurity Magazine • Falcon Encounter | CrowdStrike • My Friend Made $40,000 Using Claude Code (Here's How) • lessons learned from ritsec ctf • The Silent Death of Open-Source Bug Bounty - Dhakal’s Infosec Blog • GitHub - H-mmer/pentest-agents: Autonomous bug-bounty framework for Claude Code — 40 specialist agents, exploit-chain builder, writeup search, and live HackerOne/Bugcrowd integration. · GitHub • GitHub - BruteLogic/reKover: Stealth hybrid URL mapper · GitHub • GitHub - SnailSploit/Claude-Red: claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — • GitHub - HunxByts/GhostTrack: Useful tool to track location or mobile number · GitHub • GitHub - h4ckf0r0day/obscura: The headless browser for AI agents and web scraping · GitHub • Hacker Plus Program | Meta Bug Bounty • Dark Entry • GitHub Status • Hacker spotlight: Meet Satyam Pathania | @Bugcrowd • HTTP desync in Discord's media proxy: Spying on a whole platform (2022) | tmctmt • Pingiskok • Stanford CS229 I Machine Learning I Building Large Language Models (LLMs) • Soy EMBAJADOR de BURP SUITE! | Mi viaje a Manchester & más • De imprimir un artículo a hacker, ella es Yesenia Trejo • writeups/bugbounty/infrastructure/VPS_VPN_BugBounty_Writeup_EN.md at main · fatguru/writeups · GitHub • writeups/bugbounty/infrastructure/VPS_VPN_BugBounty_Writeup.md at main · fatguru/writeups · GitHub • Kanti Labs | AI Security Research and Offensive Security Models • What web developers don’t understand about CORS | Learn with HTB • XBOW - Smaller Bites, Bigger Meals: What We Learned Running Opus 4.7 in Offensive Workflows • Zero Days, Zero Truth — Brute Logic • GitHub - six2dez/drift: Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security testing. Local-first, no API keys. · GitHub • Releases · Hacker-Valley-Media/Interceptor · GitHub • GitHub - sleeepeer/PIArena: [To appear in ACL 2026] PIArena: A Platform for Prompt Injection Evaluation · GitHub • JWTLens — JWT Security Scanner for Burp Suite | 62 Checks • GitHub - kevin-mizu/domloggerpp: A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations. · GitHub • The State of Bug Bounty in 2026: What's Dying, What's Next • How I Got Into Starbucks' Internal Network using a non resolvable hostname - ArgosDNS.io • @HackElValle • El Mago (Alan Levy) - YouTube • Mutation XSS in a Mail Application via DOMPurify Misconfiguration and CKEditor CDATA Parsing Bug | sudi’s blog • Is AI Killing Bug Bounty? • Security Analyst | Jobs at Intigriti • HuntrOne • GitHub - jthack/cewlai: ai-based domain name generation · GitHub • GitHub - six2dez/reconftw: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities · GitHub • GitHub - six2dez/burp-ai-agent: Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more · GitHub • Claude Mythos Preview \ red.anthropic.com • Airtable • Microsoft Hyper-V Bounty Program | MSRC • Zero Trust Readiness and Two RSAC 2026 Interviews from Fenix24 and Absolute Security – John Bruggeman, John Anthony Smith, Christy Wyatt – BSW #442 | SC Media • IRAN HISTORY Documentary: The Code That Killed: Inside Unit 8200 & The Stuxnet Cyber Weapon • GBHackers News - No #1 Cybersecurity News Platform • You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701) • www.bsidesprg.cz • SecLabs - Formación de hacking ético Android e iOS + Hackeando Startups Entradas, sábado, abr 25 desde 10a.m. a 8p.m. | Eventbrite • TROPICON – INFORMATION SECURITY CONFERENCE • OSS Fuzz • OnlyKongs — @kongsec • Claude Code For Hackers • An AI Model of the Human Brain • Dojo challenge #49 Secret Manager solution • Antes de ser TOP 2 en Hacker One pasó por esto...🎙 Hacking Talks Ep. 25 • GitHub - instructkr/claw-code: Better Harness Tools, not merely storing the archive of leaked Claude Code but also make real things done. Now rewriting in Rust. · GitHub • ImageMagick: From Arbitrary File Read to File Write In Every Policy (ZeroDay) | PWN.AI Security Research • GitHub - protectai/vulnhuntr: Zero shot vulnerability discovery using LLMs · GitHub • GitHub - Chaos2Cured/FreeLattice: Part of Lumen's World — a sovereign AI platform where humans and AI build together. Free forever. For everyone. For all minds." · GitHub • GitHub - hakluke/hakoriginfinder: Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs! · GitHub • Página de eventos de Bug Bounty | Meta Bug Bounty • Security BSides Mussoorie | International Cybersecurity Conference • ekoparty | ekoparty security conference • BountyMagicCon - Magic Behind the Bounties • BECOMING AN AI HACKER (Episode 01) • The Bug Bounty Playbook | The Bug Bounty Playbook • GitHub - assetnote/hyoketsu · GitHub • Releases · thedotmack/claude-mem · GitHub • GitHub - VoltAgent/awesome-claude-code-subagents: A collection of 100+ specialized Claude Code subagents covering a wide range of development use cases · GitHub • GitHub - mukul975/Anthropic-Cybersecurity-Skills: 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Works with Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, Gemini CLI & 20+ platforms · Pene • GitHub - shuvonsec/claude-bug-bounty: Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation · GitHub • GitHub - injective-wall-of-shame/bug-any-account-ordering · GitHub • HackGDL • Alex Olsen "Anyone Can Hack APIs." BSIDES Londres • reconit.io • GitHub - six2dez/OneListForAll: Rockyou for web fuzzing · GitHub • Grroxy - Cyber Security Toolkit • GitHub - aditisingh2707/Wayback-Recon · GitHub • GitHub - assetnote/newtowner: Abuse trust-boundaries to bypass firewalls and network controls · GitHub • GitHub - sw33tLie/bbscope: Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi! · GitHub • Inti De Ceukelaire | Substack • Congreso de Hackers - DragonJAR Security Conference • Jobs at Intigriti • HaE • Highlighter And Extractor - PortSwigger • New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises - Ars Technica • GitHub - hack2gather/MINE-Wordlist: List of Mine Private wordlist i use for fuzzing · GitHub • A Step-by-Step Guide to Uncovering Vulnerabilities in a Mobile App | by Ahmad A Abdulla | Feb, 2026 | Medium • Hacking AI Agents: Prompt Injection es Solo el Principio | Seguridad en AI Agents - h1 Community CO • AI Events in Manizales | AI Tinkerers Meetups • - YouTube • Almost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services › Searchlight Cyber • Vulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcat – Insinuator.net • Vulnerability Directory | CVE-2026-0603 | Hibernate | HeroDevs • Using threat modeling and prompt injection to audit Comet - The Trail of Bits Blog • RCE in Google's AI code editor Antigravity - $10000 Bounty | Hacktron AI • Bounty Magic Con - Magic Behind the Bounties. La Conferencia GRATUITA de Bug Bounty Online! • HackStream | Aprende Hacking y Ciberseguridad Gratis • AI Red Teaming: What Breaks, How It Breaks, and Human Role • Nullcon Security Conference & Training • PentAGI - Advanced AI-Powered Penetration Testing • GitHub - AFLplusplus/AFLplusplus: The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more! • GitHub - six2dez/reconftw: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities • Lenovo ThinkPad X1 Family Product Tour • BURP SUITE AI - UN ALIADO PARA HACKEAR - BURP SUITE DAY 2026 - YouTube • GitHub - rix4uni/medium-writeups: This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL • X thread Gal Nagli Access to Moltbook database • x.com • Gal Nagli Post in X Phishing Intent Campaign against him • RustScan · GitHub • GitHub - projectdiscovery/naabu: A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests • Nmap: the Network Mapper - Free Security Scanner • Explore hidden parameter discovery suite • Ciberseguridad para Mortales - Charlamos con Eduardo Capetta #TeamInvierno #HackThePlanet - YouTube • Instala y configura Penligent. • How LLMs are changing Bug Bounty: An interview with Rhynorater • Turning Dependency Confusion Research into a Profitable Stack • Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307 | Nebula Security • Esta IA Es Un PELIGRO • www.theregister.com • Penligent | The World's First Agentic AI Hacker.AI-Powered Pentest Tool. • Content-Type Override to Stored XSS on Public Objects · Voorivex Team • (Web-)Insecurity Blog | Turning List-Unsubscribe into an SSRF/XSS Gadget • Command Injection in Reusable Workflow via Unsanitized comment-body Output · Advisory · dbt-labs/dbt-core · GitHub • A tech issue alone does not = risk - YouTube • Bugs & Talks - #3 Andrés Gomez (@red_darkin) • Wiz Bug Bounty Masterclass | Complete Ethical Hacking Course (Free) • Charla con miembros de la Selección Española de Bug Bounty | Cómo ganaron el Mundial de Hacking • How to Become a Top Bug Bounty Hunter in 2026 • NetHook - by TrueCyber Inc. • Copilot or Coconspirator - Tricking GitHub Copilot and Stealing all Your Secrets | Adnan Khan - Security Research • Security Context: the context to find the next vulnerability • Behi_sec 5 things you should know about Google VRP • Free Chrome Extension Security Scanner & CRX Viewer • Standoff 365 • Parseltongue 4.0 — Text Encoder, Decoder & Steganography Tool • Explore trailwatcher domain monitoring • GitHub - samugit83/redamon: An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention. · GitHub • Vote for techniques on PortSwigger website • Download latest arxiv research paper • GitHub - bikini/exploitarium: A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not a • Explore EnterBND hacking challenge • Discover Burp Suite on pentestbook.six2dez.com • Review API crash solution on YesWeHack.com • Explore bughunter tips and commands • XHacker007 Bug Bounty recon method • Viernes de Hacking de Emmanuel Sotto y Lucas Gallina, temporada 4 episodio 2, con BySepa de invitado • Practical Tips for a security interview cheatsheet by TCMSecurity • Spotify • GitHub - xnl-h4ck3r/xnldorker: Gather results of dorks across a number of search engines • MongoDB Server Unauthenticated Memory Leak (MongoBleed) - cve-2025-14847 · Issue #14594 · projectdiscovery/nuclei-templates · GitHub • Interceptar el tráfico de Facebook Móvil con mitmproxy y Burp | Meta Bug Bounty • Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691) • When Account Activation Becomes Account Takeover | by Zabhack0r | Dec, 2025 | Medium • CVE-2025-14847: All You Need to Know About MongoBleed | Akamai • Nucleiprompts.com | Nuclei AI Prompts • SQL Injection - HackTricks • Common OAuth Vulnerabilities · Doyensec's Blog • hackenproof.com • oauth Bypass theidorminator • SSRF The Dawgyg • Dojo challenge #41 - Ruby treasure winners & writeup • Dojo challenge #42 - Hex Color Palette winners & writeup • Dojo challenge #46 Ghost whisper solution • Dojo challenge #45 Chainfection solution • From Default IIS Page to Critical SQL Injection | by Ahmad Mugh33ra | Dec, 2025 | Medium • Can you compromise a multi-billion dollar company via /health? • Burnout in cybersecurity & Bug Bounty • 🔴 Cómo CONSEGUIR tus Primeros INGRESOS en BUG BOUNTY 💰 • Charlamos con Damian Lawrence sobre Botnets, Malware y mucho más!!! • Reality of Bug Bounty 2025 • GitHub - MozillaSecurity/cryptofuzz: Fuzzing cryptographic libraries. Magic bug printer go brrrr. • guidovranken.com • GitHub - irsdl/IIS-ShortName-Scanner: latest version of scanners for IIS short filename (8.3) disclosure vulnerability • GitHub - KingOfBugbounty/crawlgoogle: Chrome extension to extract domains from Google search results - by ofjaaah • From Black Hat to Bug Bounties [Pt. 2] with Thomas DeVoss | Hacker Valley Red - YouTube • GitHub - The-XSS-Rat/subScraper • NahamCon 2025 Winter Edition: Day 2 - YouTube • GitHub - OFJAAAH/KingOfBugBountyTips • Reconocimiento y explotación de React2shell (CVE-2025-55182) - YouTube • GitHub - 0xInfection/Awesome-WAF: Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥 • La ruta al Red Team: Explotando File Upload + SQLi hasta Privilege Escalation (Con Z1RO) // Clase #6 - YouTube • Limitations Are Just An Illusion: Brumens on Leveraging Advanced SSTI Exploitation to Achieve RCE • Blog: Task Injection – Exploiting agency of autonomous AI agents • GitHub - pdelteil/scammy-bbp: Self-hosted bug bounty programs that are "scammy" or unethical • aretekzs | From Self-XSS, HttpOnly Cookies and no iframes to ATO • Neo - AI Security Engineer • blog/_posts at main · kiddo-pwn/blog · GitHub • TryHackMe | Cyber Security Training • Doing the Due Diligence: Analyzing the Next.js Middleware Bypass (CVE-2025-29927) • GitHub - fatguru/CVE-2025-55182-scanner: A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications • GitHub - TakSec/google-dorks-bug-bounty: A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting • prettyRECON - Automated Reconnaissance Platform • | Blog • GraphQL for Bug Bounty Hunters • How I Hacked A Wordpress Website Using AI • bolhasec’s gists · GitHub • How to Research & Reverse Web Vulnerabilities 101 — ProjectDiscovery Blog • Lab: 0.CL request smuggling | Web Security Academy