shubs

Early in my career as a consultant, I was put on source code review engagements despite not being experienced.

A few days ago, I was reading a post by Kabir Acharya on how the CTF scene has died as a result of frontier models killing authentic competition.

I've been doing bug bounties for over 10 years now and over time, I have grown fonder of the life changing effects it has had for me.

TL;DR when money is involved, things can get ugly.

In the last few days, I have been able to have productive conversations with my peers in the bug bounty community including Patrik who works on the triage team and Luke who leads community efforts from HackerOne.

You can find this blog post on Assetnote's blog.

You can find this blog post on Assetnote's blog.

You can find this blog post on Assetnote's blog.

You can find this blog post on Assetnote's blog.

You can find this blog post on Assetnote's blog.

You can find this blog post on Assetnote's blog.

1) Intro & Motivations At the start of of this year, I set myself a personal goal of finding 365 bugs in 365 days.

When gaining shell access to a machine on a network, a promising attack vector is to check the internal network for web applications and services that may be accessible from the machine that has been compromised.

As of late, a fair few companies and startups have been using dedicated URL shortner services to use for tracking and social media purposes.

As of late, I have been pentesting more and more applications that use some sort of mechanism to prevent unauthorized access to directories based on client IP addresses.