. Assetnote is legendary for its bug bounty roots and recon capabilities. In this latest episode, we sit down LIVE from London with sean (head of engineering at Assetnote) and get all the tips on how to build a performant, scaling recon system! buff.ly/453j713

Yay, I was awarded a $50,000 bounty on HackerOne! hackerone.com/sam0 #TogetherWeHitHarder

I'm in Vegas! Happy to meet and talk sec.

This year's Defcon was really nice, i met a lot of people who i always admired for their work but now i like them more because in real life they were super cool. Special thanks to Meta, Microsoft, Intigriti, Hackerone teams, all my Brazilian friends and all the hackers i met.

Bug write-up for Google Extensions thanks Thomas Orlita and others for the help :) ndevtk.github.io/writeups/2023/… this writeup does include some free XSSs I got board of waiting.

Latest Critical Thinking - Bug Bounty Podcast episode with Inti De Ceukelaire has dropped 🔥 youtube.com/watch?v=MSXf2f…

Hyped! On the 28th of September i will be hosting the annual Truesec Cybersecurity Summit & present the talk I performed at Blackhat, Defcon and soon Sec-t! Get your tickets at: securitysummit.truesec.com/?utm_campaign=…

Yay, I was awarded a $30,000 bounty on HackerOne ! hackerone.com/sam0 #TogetherWeHitHarder Should have been another $50,000, however no consistently in payouts, going back to Meta.

To all triagers out there, stop trying to reproduce client-side pocs from a local html file.

if you hate light bursts from you srceen at night, enable this "chrome://flags/#enable-force-dark"

I got $66000 once for an XSS. The impact to the business and its users is the important thing in a report and not the bug itself.

In 2023: - I met in two occasions my hacker friends and also made new ones. - Reported 14 bugs - Made $450,000 My goals for 2024 are to grow and learn new things and share more writeups.

New Critical Thinking - Bug Bounty Podcast with Youssef Sammouda (sam0), should be a good one! 🤩 youtube.com/watch?v=U8lZKl…

It was a great interview! Thank you for having me Critical Thinking - Bug Bounty Podcast

Alhamdulillah, $250,000 in total with bonuses for this bug, another record broken. Many thanks to Meta and the Yes Team Philippe Harewood Josip Franjković Dzmitry Lukyanenko , crazy we're still doing it after all these years.

CVE-2025-5086

Hacking Windsurf: I asked the AI for the shell, it said yes. new video’s out. I show how I could’ve hacked you… just by getting you to click my link. Link posted below.