The Bug Bounty Hunter

Hacking a Smart Home hub for $40,000: a long and interesting hardware security journey to Pwn2Own. 🧠🏠👨🏻‍💻☠️‼️ it4sec.substack.com/p/hacking-a-sm… #bugbounty

What sonarsource.com/blog/the-state… @SonarSource #bugbounty

From DUPES to making a living from bug bounties -- Full episode: youtu.be/NI-eXMlXma4 youtube.com/shorts/pSBcqaD… #bugbounty

GitHub Actions: A Cloudy Day for Security - Part 2 binarysecurity.no/posts/2025/09/… #bugbounty

Usermode ELF injection on the PlayStation 5 reversing.codes/posts/PlayStat… #bugbounty

How Sonar Helps Achieve a Strong SOC 2 Type II Report sonarsource.com/blog/how-sonar… @SonarSource #bugbounty

Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover zere.es/posts/cache-de… #bugbounty

DEFCON 33 Bug Bounty Village CTF Writeup – First Place shubhamchaskar.com/defcon-bbv-ctf/ #bugbounty

How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities portswigger.net/blog/how-this-… @PortSwigger #bugbounty

You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819) labs.watchtowr.com/you-already-ha… @watchtowrcyber #bugbounty

El Mago x YesWeHack #3: Live Recon on ATG Bug Bounty Program youtube.com/watch?v=ewjHEK… #bugbounty

Every Hacker Needs These Linux Commands // Bug Bounty Edition youtube.com/watch?v=SWgIWN… #bugbounty

How should I scope third-party assets in my bug bounty program? intigriti.com/blog/business-… @intigriti #bugbounty

How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials security.googleblog.com/2025/09/pixel-… @google #bugbounty

How I Found a Critical Password Reset Bug in the BB program(and Got $4,000) s41n1k.medium.com/how-i-found-a-… #bugbounty

How Sui Move rethinks flash loan security blog.trailofbits.com/2025/09/10/how… @trailofbits #bugbounty

Protecting your AI code: How SonarQube defends against the "Rules File Backdoor" sonarsource.com/blog/protectin… @SonarSource #bugbounty

GitHub Actions: A Cloudy Day for Security - Part 1 binarysecurity.no/posts/2025/08/… #bugbounty

Java 22: Leverage unnamed variables and patterns sonarsource.com/blog/java-22-l… @SonarSource #bugbounty

Command Injection in Vertex AI youtube.com/shorts/en4n6xC… #bugbounty