@aacle_

Building @Vulncure ⚡ Better SaaS security shouldn't cost a fortune. AI-powered vulnerability finding & code fixes from $49/mo ↓ waitlist open → https://xitter.cf/t.co/XkcGeBREXr

Joined June 2017
  • Tweets4K
  • Following292
  • Followers50K
1.1KMedia
If Claude is part of your bug bounty workflow, you’re missing something important. You must read this before you go further.

Why you should use Claude with Burpsuite MCP

Most hunters using Claude for bug bounty are still running a copy-paste relay.

Article · @aacle_
1
3
33
2,686
Four programs, four rule changes, one direction. Coinbase killed mediums, GitHub built a VIP tier, Apple added cooldowns, HackerOne wants your ID. Top hunters benefit, beginners some struggle, AI tools caused it.

The side-gig era of bug bounty just seems to be ended.

If you were thinking about getting into bug bounty as a side income, the door just got heavier.

Article · @aacle_
1
4
2,300
How to think about authentication bypass before you test it. 82 disclosed reports, 8 parts, one framework.

Analysed 1,030 disclosed HackerOne auth bypass reports. Read 82 with enough public detail for deep

1. Parameter parsing mismatch (; vs &) 2. Origin validation bypass 3. HPP on host validation 4. Bridge origin bypass 5. Callback validation bypass

Article · @aacle_
1
11
42
2,239
Load more