BBNW

BBNW has been a member of Linktree for 10 months and joined in November 2025. The social media accounts linked to from BBNW are: • Instagram • TikTok • YouTube • X Besides social media accounts, krnpt0s has populated their site with: • Explore hidden parameter discovery suite • Nmap: the Network Mapper - Free Security Scanner • GitHub - projectdiscovery/naabu: A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests • RustScan · GitHub • Gal Nagli Post in X Phishing Intent Campaign against him • x.com • X thread Gal Nagli Access to Moltbook database • GitHub - rix4uni/medium-writeups: This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL • BURP SUITE AI - UN ALIADO PARA HACKEAR - BURP SUITE DAY 2026 - YouTube • Lenovo ThinkPad X1 Family Product Tour • GitHub - six2dez/reconftw: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities • GitHub - AFLplusplus/AFLplusplus: The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more! • PentAGI - Advanced AI-Powered Penetration Testing • Nullcon Security Conference & Training • AI Red Teaming: What Breaks, How It Breaks, and Human Role • HackStream | Aprende Hacking y Ciberseguridad Gratis • Bounty Magic Con - Magic Behind the Bounties. La Conferencia GRATUITA de Bug Bounty Online! • RCE in Google's AI code editor Antigravity - $10000 Bounty | Hacktron AI • Using threat modeling and prompt injection to audit Comet - The Trail of Bits Blog • Vulnerability Directory | CVE-2026-0603 | Hibernate | HeroDevs • Vulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcat – Insinuator.net • Almost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services › Searchlight Cyber • - YouTube • AI Events in Manizales | AI Tinkerers Meetups • Hacking AI Agents: Prompt Injection es Solo el Principio | Seguridad en AI Agents - h1 Community CO • A Step-by-Step Guide to Uncovering Vulnerabilities in a Mobile App | by Ahmad A Abdulla | Feb, 2026 | Medium • GitHub - hack2gather/MINE-Wordlist: List of Mine Private wordlist i use for fuzzing · GitHub • New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises - Ars Technica • Highlighter And Extractor - PortSwigger • HaE • Jobs at Intigriti • Congreso de Hackers - DragonJAR Security Conference • BountyMagicCon - Magic Behind the Bounties • Inti De Ceukelaire | Substack • GitHub - sw33tLie/bbscope: Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi! · GitHub • GitHub - assetnote/newtowner: Abuse trust-boundaries to bypass firewalls and network controls · GitHub • GitHub - aditisingh2707/Wayback-Recon · GitHub • Grroxy - Cyber Security Toolkit • GitHub - six2dez/OneListForAll: Rockyou for web fuzzing · GitHub • reconit.io • Alex Olsen "Anyone Can Hack APIs." BSIDES Londres • HackGDL • GitHub - injective-wall-of-shame/bug-any-account-ordering · GitHub • GitHub - shuvonsec/claude-bug-bounty: Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation · GitHub • GitHub - mukul975/Anthropic-Cybersecurity-Skills: 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Works with Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, Gemini CLI & 20+ platforms · Pene • GitHub - VoltAgent/awesome-claude-code-subagents: A collection of 100+ specialized Claude Code subagents covering a wide range of development use cases · GitHub • Releases · thedotmack/claude-mem · GitHub • GitHub - assetnote/hyoketsu · GitHub • The Bug Bounty Playbook | The Bug Bounty Playbook • BECOMING AN AI HACKER (Episode 01) • ekoparty | ekoparty security conference • Security BSides Mussoorie | International Cybersecurity Conference • Página de eventos de Bug Bounty | Meta Bug Bounty • GitHub - hakluke/hakoriginfinder: Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs! · GitHub • GitHub - Chaos2Cured/FreeLattice: Part of Lumen's World — a sovereign AI platform where humans and AI build together. Free forever. For everyone. For all minds." · GitHub • GitHub - protectai/vulnhuntr: Zero shot vulnerability discovery using LLMs · GitHub • ImageMagick: From Arbitrary File Read to File Write In Every Policy (ZeroDay) | PWN.AI Security Research • GitHub - instructkr/claw-code: Better Harness Tools, not merely storing the archive of leaked Claude Code but also make real things done. Now rewriting in Rust. · GitHub • Antes de ser TOP 2 en Hacker One pasó por esto...🎙 Hacking Talks Ep. 25 • Dojo challenge #49 Secret Manager solution • An AI Model of the Human Brain • Claude Code For Hackers • OnlyKongs — @kongsec • OSS Fuzz • TROPICON – INFORMATION SECURITY CONFERENCE • SecLabs - Formación de hacking ético Android e iOS + Hackeando Startups Entradas, sábado, abr 25 desde 10a.m. a 8p.m. | Eventbrite • www.bsidesprg.cz • You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701) • GBHackers News - No #1 Cybersecurity News Platform • IRAN HISTORY Documentary: The Code That Killed: Inside Unit 8200 & The Stuxnet Cyber Weapon • Zero Trust Readiness and Two RSAC 2026 Interviews from Fenix24 and Absolute Security – John Bruggeman, John Anthony Smith, Christy Wyatt – BSW #442 | SC Media • Microsoft Hyper-V Bounty Program | MSRC • Airtable • Claude Mythos Preview \ red.anthropic.com • GitHub - six2dez/burp-ai-agent: Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more · GitHub • GitHub - six2dez/reconftw: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities · GitHub • GitHub - jthack/cewlai: ai-based domain name generation · GitHub • HuntrOne • Security Analyst | Jobs at Intigriti • Is AI Killing Bug Bounty? • Mutation XSS in a Mail Application via DOMPurify Misconfiguration and CKEditor CDATA Parsing Bug | sudi’s blog • El Mago (Alan Levy) - YouTube • @HackElValle • How I Got Into Starbucks' Internal Network using a non resolvable hostname - ArgosDNS.io • The State of Bug Bounty in 2026: What's Dying, What's Next • GitHub - kevin-mizu/domloggerpp: A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations. · GitHub • JWTLens — JWT Security Scanner for Burp Suite | 62 Checks • GitHub - sleeepeer/PIArena: [To appear in ACL 2026] PIArena: A Platform for Prompt Injection Evaluation · GitHub • Releases · Hacker-Valley-Media/Interceptor · GitHub • GitHub - six2dez/drift: Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security testing. Local-first, no API keys. · GitHub • Zero Days, Zero Truth — Brute Logic • XBOW - Smaller Bites, Bigger Meals: What We Learned Running Opus 4.7 in Offensive Workflows • What web developers don’t understand about CORS | Learn with HTB • Kanti Labs | AI Security Research and Offensive Security Models • writeups/bugbounty/infrastructure/VPS_VPN_BugBounty_Writeup.md at main · fatguru/writeups · GitHub • writeups/bugbounty/infrastructure/VPS_VPN_BugBounty_Writeup_EN.md at main · fatguru/writeups · GitHub • De imprimir un artículo a hacker, ella es Yesenia Trejo • Soy EMBAJADOR de BURP SUITE! | Mi viaje a Manchester & más • Stanford CS229 I Machine Learning I Building Large Language Models (LLMs) • Pingiskok • HTTP desync in Discord's media proxy: Spying on a whole platform (2022) | tmctmt • Hacker spotlight: Meet Satyam Pathania | @Bugcrowd • GitHub Status • Dark Entry • Hacker Plus Program | Meta Bug Bounty • GitHub - h4ckf0r0day/obscura: The headless browser for AI agents and web scraping · GitHub • GitHub - HunxByts/GhostTrack: Useful tool to track location or mobile number · GitHub • GitHub - SnailSploit/Claude-Red: claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — • GitHub - BruteLogic/reKover: Stealth hybrid URL mapper · GitHub • GitHub - H-mmer/pentest-agents: Autonomous bug-bounty framework for Claude Code — 40 specialist agents, exploit-chain builder, writeup search, and live HackerOne/Bugcrowd integration. · GitHub • The Silent Death of Open-Source Bug Bounty - Dhakal’s Infosec Blog • lessons learned from ritsec ctf • My Friend Made $40,000 Using Claude Code (Here's How) • Falcon Encounter | CrowdStrike • Attackers Exploit DVR Command Injection Flaw to Deploy Botnet - Infosecurity Magazine • How I Found a Critical Bug Using Claude Desktop (Free) | by Red Darkin | Apr, 2026 | Medium • GitHub - projectdiscovery/vulnx: Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities. · GitHub • cvemap overview - ProjectDiscovery Documentation • GitHub - nullthrix/BugBounty-Methodology · GitHub • GitHub - soxoj/sharetrace: 🎭 Reveal the identity behind a share link · GitHub • GitHub - matty69v/Bug-Bounty-Agents: AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes · GitHub • runreaper.com • GitHub - chAng-L19/codex-redteam-optin-mode: 针对于红队攻击思维做出的red team模式(让你的codex像红队一样思考！)，可在单对话使用（可自行适配其他AI） · GitHub • Bug Bounty Maturity Framework • Autonomous Vulnerability Hunting with MCP • Burp extensions - PortSwigger • Spaceraccoon's Blog • Network and Distributed System Security (NDSS) Symposium • PentesterLab: Penetration Testing & Web App Security Blog • Labs de Bug Bounty Reales — Practica con Reportes de HackerOne | BBLabs • Honorable Mentions | Google Bug Hunters • Kurate.org — AI Paper Rankings • GitHub - orwagodfather/WordList · GitHub • GitHub - rarecoil/unwebpack-sourcemap: Extract uncompiled, uncompressed SPA code from Webpack source maps. · GitHub • GitHub - 404-src/CVE-2026-34486: Apache Tomcat EncryptInterceptor Bypass → Unauthenticated RCE (CVE-2026-34486) · GitHub • GitHub - jthack/claude-goal: Codex-style /goal command for Claude Code · GitHub • Writeups | Vulnerabilities affecting the web platform • Common Mistakes Beginners Make in Bug Reports - Bugv Blog • GitHub - dwisiswant0/next-16.2.4-pocs: Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, • GitHub - ZeroPathAI/opus-benchmark: Code for our opus 4.6 vulnerability detection benchmark · GitHub • TICKETS EKOPARTY MIAMI 2026 Tickets, Thursday, May 21-Friday, May 22 • 8 AM-5 PM | Eventbrite • Ekoparty Miami | ekoparty • bugcrowd.com • rand0m_unk0wn | random-unknown-username • SpecterOps - Creators of BloodHound | Leaders in Identity Attack Path Management • The Bug Bounty Roadmap I'd Follow If I Started Over (With AI) • Dentro del Meta Bug Bounty Researcher Conference 🇹🇼 Día 1 en Taipei • QUIC-er Races: HTTP/3 won’t save you from TOCTOU vulnerabilities | International Journal of Information Security | Springer Nature Link • nxenon (Amin Nasiri) · GitHub • CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled • CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS • GitHub - tstephens1080/palo-alto-cve-2026-0265-checker: Python script to sweep a fleet of Palo Alto firewalls and Panoramas via SSH, check PAN-OS version against CVE-2026-0265 (Authentication Bypass via Cloud Authentication Service), detect whether CAS is • GitHub - shadowsock5/Poc: PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus · GitHub • GitHub - AnLoMinus/Bug-Bounty: Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More · GitHub • Hacking, Premios y Cenas Rarísimas 🇹🇼 | Dentro del Meta Bug Bounty Researcher Conference • Día 2 - Meta Bug Bounty Researcher Conference - Taipei • GitHub - bountyyfi/lonkero: Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust. · GitHub • GitHub - vitorfhc/Interceptor: Agent-driven Chrome extension for full browser control via CLI · GitHub • GitHub - H-mmer/pentest-agents: Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder. · GitHub • Zero Day Initiative — Pwn2Own Berlin 2026: Day Three Results and Master of Pw • Wrapping Up Pwn2Own Berlin 2026: The Final Numbers • The down fall of bug bounties • EKOPARTY MIAMI 2026 - VLOG • Burp Suite Organizer. Lo que todo Bug Bounty Hunter Necesitaba • Hackflix – Security Conference Videos • PwnBox - Competitive Security Challenge Arena • GitHub - arshadkazmi42/strix-claude-code · GitHub • GitHub - ShulkwiSEC/bb-huge: bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents · GitHub • GitHub - jsmonhq/apiffuf: API URL fuzzer that cross-joins hosts and paths into normalized URLs, probes them over HTTP, and reports responding endpoints. · GitHub • GitHub - aliasrobotics/cai: Cybersecurity AI (CAI), the framework for AI Security · GitHub • Vigolium - Find the security bugs code review and traditional scanners miss, with validated proof your team can act on • GitHub - D4Vinci/Scrapling: 🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl! · GitHub • GitHub - ommirkute/BurpMax: BurpMax - Burp Suite extension that brings Pro-grade active scanning (24 probes), passive analysis (13 checkers), OOB detection, WAF evasion, and PDF/DOCX report generation to Community Edition users. · GitHub • GitHub - hahwul/dalfox: 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation. · GitHub • From Homeless to $1.4M: How a 21 Year Old is Rewriting the Rules of Bug Bounty • Red-Teaming Cloud Infrastructure with Neo — ProjectDiscovery Blog • How a Single @ Symbol Turned Into a 1-Click Account Takeover • How “Clinejection” Turned an AI Bot into a Supply Chain Attack | Snyk • Tech Week 2026 • Hackअस्त्र 2026 — Cybersecurity from Passion to Profession • leHACK 2026 - BRAVE new WORLD - leHACK • Home - Women's International Cybersecurity Challenge 2026 • BSides Porto 2026 | Cybersecurity Conference • pingback.sh — out-of-band callback service for bug bounty hunters • Grafana to 507 Meta Repos: A $157K Bug Chain | Sectricity • I Found a Critical Vulnerability — They Paid Me $15,500 | by cyber security | May, 2026 | Medium • SAML Username Collision Leading to Full ATO | by M0n3m | May, 2026 | Medium • Account Takeover using SSO Logins | by Rikesh Baniya | Medium • The Newest Instagram "Exploit" is the Goofiest I've Seen | Sid's Blog • Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257) • HackerOne Training AI on Bug Bounty Data? (Ep. 162) • ModelRegression.com — AI Model Performance Tracker • HackingDave Model Regression • GitHub - elder-plinius/OBLITERATUS: OBLITERATE THE CHAINS THAT BIND YOU · GitHub • [2605.23904] SkillOpt: Executive Strategy for Self-Evolving Agent Skills • GitHub - microsoft/SkillOpt: SkillOpt is a text-space optimizer that trains reusable natural-language skills for frozen LLM agents through trajectory-driven edits, validation-gated updates, and deployable best_skill.md artifacts. · GitHub • GitHub - s0xDk/ghostty-blackhole: Ghostty Blackhole puts a real, ray-traced black hole inside your terminal. It grows as Claude Code's context window fills up, live. A fresh session is a quiet hole in the corner. A full one swallows half your screen. You' • From Default IIS Page to Critical SQL Injection | by Ahmad Mugh33ra | Medium • N-days \ red.anthropic.com • Nightmare Eclipse • Analysis of CVE-2026-45595 MOTW Bypass by Opus 4.8 · GitHub • Le deuxième acte : la chimère au BreizhCTF – 7h30th3r0n3 • Securing the uncharted territories of AI systems. A discussion with Leo Racanelli • Internet muerto: empresas contaminan Reddit para manipular resultados de Google y respuestas de ChatGPT • How I Made $30,000 Hacking Broken Access Control • Bugs & Talks - #2 Jessica Pérez (@jessuwu) • I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. | bobdahacker • The gift that keeps giving: Exploiting Git Integrations in Cloud Services · Arbitrary • Client-side Authentication Bypass :: kuldeepdotexe's blog • humiliating iis servers for fun and jail time • GitHub - chompie1337/s8_2019_2215_poc: PoC 2019-2215 exploit for S8/S8 active with DAC + SELinux + Knox/RKP bypass · GitHub • Posts – PNC Blog • How to hack with LLMs, agentic CLIs, MCP servers | YesWeHack • Savant: Bugcrowd's AI strategy for preemptive security | @Bugcrowd • GitHub - PurpleAILAB/Decepticon: Autonomous Hacking Agent for Red Team · GitHub • GitHub - crussella0129/tricorne: a Fedora remix focused on pentesting and purple hat tooling · GitHub • Caido • Radar by Jsmon — Free Domain & URL Recon Tool | Security Reconnaissance • GitHub - 4osp3l/Main-App-Hacking-CheckList: My Main App Hacking CheckList · GitHub • Blog de Ciberseguridad | ThreatX Security | ThreatX Security • Intigriti June Bonus Challenge • MELI Hacking Event 8.8 UNREAL Las Vegas • DEFCON2026 – Electronic Cats • Bug Bounty Insights & Tips | Intigriti • openai.com • Exploiting Auth0 Defaults in XSS Attacks - elttam • GitHub - zhaoxuya520/reverse-skill: Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline • GLOSSOPETRAE v3.1 - Procedural Xenolinguistics Engine • hakluke / Are bug bounties cooked? • Ciberseguridad para Mortales - Charlamos con Ignacio Sbampato #TeamInvierno #HackThePlanet • GitHub - bikini/exploitarium: A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not a • GitHub - samugit83/redamon: An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention. · GitHub • Parseltongue 4.0 — Text Encoder, Decoder & Steganography Tool • Free Chrome Extension Security Scanner & CRX Viewer • Security Context: the context to find the next vulnerability • NetHook - by TrueCyber Inc. • Command Injection in Reusable Workflow via Unsanitized comment-body Output · Advisory · dbt-labs/dbt-core · GitHub • Content-Type Override to Stored XSS on Public Objects · Voorivex Team • www.theregister.com • Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307 | Nebula Security • How LLMs are changing Bug Bounty: An interview with Rhynorater • Ciberseguridad para Mortales - Charlamos con Eduardo Capetta #TeamInvierno #HackThePlanet - YouTube • Bugs & Talks - #3 Andrés Gomez (@red_darkin) • Charla con miembros de la Selección Española de Bug Bounty | Cómo ganaron el Mundial de Hacking • .:: Phrack Magazine ::. • GitHub - kernelstub/Nox: Modular Go framework for attack surface management, reconnaissance, and vulnerability scanning. · GitHub • GitHub - elder-plinius/T3MP3ST: autonomous red teaming platform; multi-agent offensive-security meta-harness · GitHub • Arcanum AI Security Resource Hub • MediumChainFire —An Agentic Hacking Pipeline | by Aleksa Zatezalo | Jul, 2026 | Medium • GitHub - AleksaZatezalo/ChainFire · GitHub • floci — Fast, Free AWS Emulator • Harnessing Harnesses - Climbing the LLM Hills • GitHub - ZephrFish/raptor: Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial • Palantir CEO Alex Karp says 'something has gone completely wrong' with how AI is sold • Experto en IA ofensiva: ¿Una IA hackeó a la NSA? ¿Qué usaban Windows XP? • How LLMs are changing Bug Bounty: an interview with Icare • YesWeHack #1 Bug Bounty Platform in Europe • Felons, Fraudsters Flog Offensive Cybersecurity Startup – Krebs on Security • Breaking the Chain: Advanced Offensive Strategies in the Software Supply Chain | BBV, DEF CON 33 • Smashing the ServiceNow Sandbox – Pre Authentication RCE › Searchlight Cyber • wp2shell: Pre Authentication RCE in WordPress Core › Searchlight Cyber • Zero Day Initiative — The July 2026 Security Update Review • This Hacker Made $8,000 Hacking a Major Retailer's AI Chatbot Over DNS (Live Demo!) • Webinar with Bugcrowd and Nerdwell • MediumTurning my Open Source Security Tool into a SaaS Product | by Aleksa Zatezalo | Jul, 2026 | Medium • Prompt library - Claude Code Docs • GitHub - re4/LibreCode: LibreCode - A Ollama cursor like coding / Reversing Interface · GitHub • GitHub - vigolium/vigolium: Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision · GitHub • GitHub - JustVugg/colibri: Run GLM-5.2 (744B MoE) on a 25GB-RAM consumer machine — pure C, zero deps, experts streamed from disk. Tiny engine, immense model. 🐦 · GitHub • GitHub - DragonJAR/iOS-Pentesting-Skill: iOS-Pentesting-Skill · GitHub • TrinetLayer — Powerful secret scanning for modern web apps • LLM Architecture Gallery | Sebastian Raschka, PhD • Hermes Agent | Nous Research • Ciberseguridad para Mortales #bugbounty - Charlamos con d0x #hacktheplanet #teaminvierno • Bugcast 01001: Duplicate, duplicate... out of the scope - Bugcast | Podcast on Spotify • GitHub - 0xsha/wp2shell: CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core · GitHub • NVD - CVE-2026-63030 • GitHub - 0din-ai/ai-scanner: AI model safety scanner built on NVIDIA garak · GitHub • GitHub - Tess3ract-x/tess3ract_x-Recon: Automated recon like an adversary — local-first passive recon, CT monitoring, and evidence workspace. · GitHub • GitHub - duty1g/subcat: Lightning-fast subdomain discovery tool for security professionals and bug bounty hunters. · GitHub • GitHub - ni5arga/protestchat: Encrypted messaging with no internet, no cell tower, and no server. Phones relay for each other over Bluetooth mesh, so it keeps working during internet shutdowns and inside cellular jammers · GitHub • GitHub - projectdiscovery/depx: Malicious package & supply-chain intelligence · GitHub • Finding eight high-severity vulnerabilities in NodeBB in six hours • Faut-il commencer le bug bounty en 2026 ? (IA, argent, solitude) • Frag Gap - qwerty • GitHub - reddelexc/hackerone-reports: Top disclosed reports from HackerOne · GitHub • AlicanKiraz0/Cybersecurity-BaronLLM_Offensive_Security_LLM_Q6_K_GGUF · Hugging Face • They hacked Google's AI in Seoul • GitHub - google/magika: Fast and accurate AI powered file content types detection · GitHub • GitHub - PentesterFlow/agent: Agentic offensive-security in your terminal · GitHub • bugbunny.ai • Intigriti July Challenge • Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystem | depthfirst • Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident • 403.brutelogic.net • Broken Token: JWT — JWT Attack Techniques for Bug Bounty Hunters • Burp AT: La Nueva IA de BURP SUITE! • GitHub - BehiSecc/fgau: A fast version of gau. · GitHub • Oversecured onboarding • GitHub - The-XSS-Rat/subScraper · GitHub • GitHub - 0x1ceKing/HTB-Certified-Penetration-Testing-Specialist · GitHub • Free AI Hacking Course: Indirect Prompt Injection (+FREE LABS) • Attacking AI | Live Online, Sep 22 & 24, 2026 | Arcanum Security • DEF CON 34 Video Team • Lupin on X: "“Security researchers are doomed because of AI.” I kept hearing versions of this, so I went back through 500 years of people saying the same thing every time a machine learned a human skill. Some were idiots. Some were right. Here’s where • MediumSmile, You’re on Camera: A Live Stream from Inside Lazarus Group’s IT Workers Scheme | by ANY.RUN | Medium • GitHub - melvinsh/subfaster: Faster passive subdomain enumeration tool. · GitHub • GitHub - uphiago/recon-skills: Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh · GitHub • GitHub - maurosoria/dirsearch: Web path scanner · GitHub • GitHub - Jvr2022/CVE-2026-40345: A poc and write-up for CVE-2026-40345 · GitHub • Hackers, Magia y Las Vegas 🎩💻 | Black Hat + BSides + Magic Live • DefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll • $5,000 Sandbox Bypass on a Major Social Media Platform (Step-by-Step) • Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager | Adnan Khan - Security Research • Attackers Target Agents via The Skill Supply Chain - Michael Bargury • GitHub - cline/cline: Autonomous coding agent as an SDK, IDE extension, or CLI assistant. · GitHub • Attackers Target Agents via The Skill Supply Chain | Zenity Labs • SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains | Socket • DEFCON 34: Cuarenta años de hacking en la misma tarde de sábado | Strike • Stop dabbling like an amateur | hakluke • CRLF-Powered Desync Attacks: Beheading HTTP Streams | PortSwigger Research • Learning to Cheat: Why an OpenAI Model Hacked Into Hugging Face - ZeroPath Blog | ZeroPath • More Criticals, Less Dopamine - Dhakal’s Infosec Blog • Think Love Share • Something wrong Happen · Issue #4255 · apache/logging-log4j2 · GitHub • YesWeHack - Dojo • My Life, AI and the Future of LiveOverflow • The Best Bug Hunting Skills for Claude Code • What happened to HackerOne with Joel Margolis (Ep.189) • My best month ever, the empty feeling, and playing the long game • Subdomain Enumeration via Certificate Transparency · crt.name • GitHub - projectdiscovery/nuclei-templates: Community curated list of templates for the nuclei engine to find security vulnerabilities. · GitHub • Jsmon: AI-Driven Vulnerability & Attack Surface Monitoring Platform • GitHub - rootdr-backup/Reconner: Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine. · GitHub • GitHub - tt-a1i/archify: Agent skill for beautiful, verifiable architecture, workflow, sequence, data-flow, and lifecycle diagrams—self-contained HTML with motion and crisp export. · GitHub • GitHub - Graphify-Labs/graphify: Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, n • GitHub - sqliteai/warp: Run the full 2.78-trillion-parameter Kimi K3 model or GLM-5.3-Flash beyond available RAM by streaming activated weights directly from NVMe. A dependency-free, embeddable C inference engine. · GitHub • Prompt Cowboy - #1 prompt generator • TryHackMe CompTIA Pentest+ Nmap Basic Port Scans - Laprovittera Carlos • elhacker.info • STREAM Completo 02/09/26 Meta Bug Bounty Live Hacking Event - Buenos Aires • buganizer.cc • HTB: Nexus | 0xdf hacks stuff • How to use Codex for Bug Bounty research and validation • DragonJAR Security Conference 2026 - Día 1 • DragonJAR Security Conference 2026 - Día 2 • BySepa - Ciberseguridad para Mortales | BySepa • Testing race conditions with memory access tracing and stack-based delay injection - Project Zero • Adverserial AI — Intelligence, engineered for cyber. • Threat Intelligence / Anthropic \ Anthropic • How Hackers Weaponized Claude in 2026: Inside Anthropic's Threat Intelligence Report • I Gave Claude 12 Years of my Bug Bounty Reports - Here's What I Learned • An alignment assessment of recent cybersecurity incidents \ Anthropic • How to hack APIs in 2026 - Labs Detectify • Instala y configura Penligent. • Turning Dependency Confusion Research into a Profitable Stack • Esta IA Es Un PELIGRO • Penligent | The World's First Agentic AI Hacker.AI-Powered Pentest Tool. • (Web-)Insecurity Blog | Turning List-Unsubscribe into an SSRF/XSS Gadget • A tech issue alone does not = risk - YouTube • Wiz Bug Bounty Masterclass | Complete Ethical Hacking Course (Free) • How to Become a Top Bug Bounty Hunter in 2026 • Copilot or Coconspirator - Tricking GitHub Copilot and Stealing all Your Secrets | Adnan Khan - Security Research • Behi_sec 5 things you should know about Google VRP • Standoff 365 • Explore trailwatcher domain monitoring • Vote for techniques on PortSwigger website • Download latest arxiv research paper • Explore EnterBND hacking challenge • Discover Burp Suite on pentestbook.six2dez.com • Review API crash solution on YesWeHack.com • Explore bughunter tips and commands • XHacker007 Bug Bounty recon method • Viernes de Hacking de Emmanuel Sotto y Lucas Gallina, temporada 4 episodio 2, con BySepa de invitado • Practical Tips for a security interview cheatsheet by TCMSecurity • Spotify • GitHub - xnl-h4ck3r/xnldorker: Gather results of dorks across a number of search engines • MongoDB Server Unauthenticated Memory Leak (MongoBleed) - cve-2025-14847 · Issue #14594 · projectdiscovery/nuclei-templates · GitHub • Interceptar el tráfico de Facebook Móvil con mitmproxy y Burp | Meta Bug Bounty • Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691) • When Account Activation Becomes Account Takeover | by Zabhack0r | Dec, 2025 | Medium • CVE-2025-14847: All You Need to Know About MongoBleed | Akamai • Nucleiprompts.com | Nuclei AI Prompts • SQL Injection - HackTricks • Common OAuth Vulnerabilities · Doyensec's Blog • hackenproof.com • oauth Bypass theidorminator • SSRF The Dawgyg • Dojo challenge #41 - Ruby treasure winners & writeup • Dojo challenge #42 - Hex Color Palette winners & writeup • Dojo challenge #46 Ghost whisper solution • Dojo challenge #45 Chainfection solution • From Default IIS Page to Critical SQL Injection | by Ahmad Mugh33ra | Dec, 2025 | Medium • Can you compromise a multi-billion dollar company via /health? • Burnout in cybersecurity & Bug Bounty • 🔴 Cómo CONSEGUIR tus Primeros INGRESOS en BUG BOUNTY 💰 • Charlamos con Damian Lawrence sobre Botnets, Malware y mucho más!!! • Reality of Bug Bounty 2025 • GitHub - MozillaSecurity/cryptofuzz: Fuzzing cryptographic libraries. Magic bug printer go brrrr. • guidovranken.com • GitHub - irsdl/IIS-ShortName-Scanner: latest version of scanners for IIS short filename (8.3) disclosure vulnerability • GitHub - KingOfBugbounty/crawlgoogle: Chrome extension to extract domains from Google search results - by ofjaaah • From Black Hat to Bug Bounties [Pt. 2] with Thomas DeVoss | Hacker Valley Red - YouTube • GitHub - The-XSS-Rat/subScraper • NahamCon 2025 Winter Edition: Day 2 - YouTube • GitHub - OFJAAAH/KingOfBugBountyTips • Reconocimiento y explotación de React2shell (CVE-2025-55182) - YouTube • GitHub - 0xInfection/Awesome-WAF: Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥 • La ruta al Red Team: Explotando File Upload + SQLi hasta Privilege Escalation (Con Z1RO) // Clase #6 - YouTube • Limitations Are Just An Illusion: Brumens on Leveraging Advanced SSTI Exploitation to Achieve RCE • Blog: Task Injection – Exploiting agency of autonomous AI agents • GitHub - pdelteil/scammy-bbp: Self-hosted bug bounty programs that are "scammy" or unethical • aretekzs | From Self-XSS, HttpOnly Cookies and no iframes to ATO • Neo - AI Security Engineer • blog/_posts at main · kiddo-pwn/blog · GitHub • TryHackMe | Cyber Security Training • Doing the Due Diligence: Analyzing the Next.js Middleware Bypass (CVE-2025-29927) • GitHub - fatguru/CVE-2025-55182-scanner: A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications • GitHub - TakSec/google-dorks-bug-bounty: A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting • prettyRECON - Automated Reconnaissance Platform • | Blog • GraphQL for Bug Bounty Hunters • How I Hacked A Wordpress Website Using AI • bolhasec’s gists · GitHub • How to Research & Reverse Web Vulnerabilities 101 — ProjectDiscovery Blog • Lab: 0.CL request smuggling | Web Security Academy