UNBELIEVABLE OS Command Injection technique!? 😱

Zendesk Fiasco & the CTBB Naughty List (Ep. 94)

Why note taking is good for your health!

My struggle with LHE burnout!

Is THIS the most underrated skill in bug bounty?

I ignored SSRF for too long...

A Chat with Dr. Bouman - Life as a Hacker and a Doctor (Ep.93)

The BEST bugs for new hunters (with @gr3pme)

When IoT hacking meets Indiana Jones!

Want to learn hardware hacking? Try this.

Plain text session tokens... ON FACEBOOK!?

SAML XPath Confusion, Chinese DNS Poisoning, and AI Powered 403 Bypasser (Ep. 92)

Be careful what you sell on eBay!

POCs failing? Here’s the problem AND the fix.

PHP stripslashes() DOESN'T strip slashes!?

Zero to LHE in 9 Months (feat gr3pme) (Ep. 91)

PortSwigger's new release is a BANGER!

How 25 characters can get you a SHELL!

UNBELIEVABLE OS Command Injection technique!? 😱

Using x-request-id to access ANY account via Header Injection!

5k Clickjacking, Encryption Oracles, and Cursor for PoCs (Ep. 90)

Exploiting X-REQUEST-ID to write PHP in /var/www!

RELATIONSHIP HACKS for bug bounty hunters.

How does Justin STAY MOTIVATED? Here's how.

How long does it take to find a bug in a new scope?