Now with early 2026 updates. Note, I may get comission from some of these links: I'm a big paper note taker, and I go through a bunch of notebooks and pens a year. I mostly use it…
If you're reading this, you've probably used Burp, and you're probably aware of Burp Collaborator, the out of band detection feature. Basically, it gives you a (sub)domain name…
Nessus is neverendingly annoying. 1. Takes way too long to install and "initialize". 2. Can't open anything in a new tab. 3. Can't easily copy large lists of IPs (e.g. a…
I have a bit of a love hate relationship with Self XSS. I find them somewhat regularly, and while I do think programs should pay a bounty for them (the lowest they offer), I’m…
After I created TemplateSearch.io, I was testing it out by searching for random things and I came across several templates for YesWiki. So I Googled it to see exactly what it is…
This is the first part in my new series "Funny Bug Bounty Reports". These are not judged on their merits, technical abilities, or anything other than if they make me laugh. Today,…
I was tired of manually searching for the right Nuclei templates to use. The one existing site that lets you search them — while interestingly designed and certainly more stylish…
I went to install Tailscale on a Wifi Pineapple, and the normal pipe to bash (lol) script didn't work. I had to do it manually like this. YMMV attempt at your own risk . I'm…
I received an email saying I'm a top 25 researcher in the California VDP from 2024. Not too bad from the thousands of reports they get, I'm sure.
I recently ran across an application that allowed access to a ClickHouse DB for my user. The access was allowed, so that isn't an issue. However, when we as pentesters or bug…