JWT Analyzer in Caido - Built for Hackers
A Caido plugin for JWT work: decoding and inspecting tokens, breaking down their claims, and running built-in attack simulations without leaving the proxy.
Blog
Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be.
How to Become a Successful Security Researcher | SecMeet 0x02
SecMeet 0x02 with James Kettle (albinowax) of PortSwigger on HTTP request smuggling, web cache poisoning, and finding techniques nobody has yet.
CVE-2025-32433 (Erlang/OTP SSH RCE vulnerability)
CVE-2025-32433, unauthenticated RCE in the Erlang/OTP SSH implementation: full exploitation walkthrough plus network and host detection techniques.
JavaScript Analysis Masterclass - Part 2
Static analysis finds endpoints and secrets; runtime analysis finds the bugs. Live debugging with DevTools, local overrides, logic flaws and DOM-based XSS.
JavaScript Analysis Masterclass - Part 1
Collecting a target's JavaScript with Burp, the Wayback Machine and the Archive.org CDX API, then analysing it statically for endpoints and secrets.
Inside the Mind of a $Million Bug Bounty Hunter | SecMeet 0x01
SecMeet 0x01 with Nikhil Shrivastava (niks), B-Sides Ahmedabad founder and Synack red teamer, on earning over a million dollars in bounties.
The Ultimate SAL1 Review + Giveaway 🔥 | Is TryHackMe Serious?
TryHackMe's Security Analyst Level 1 certification reviewed: the training path, the exam structure, and whether it is serious blue team training.
Hacker vs. ChatGPT! Who Wins?
ChatGPT tested against real bug bounty challenges: analysing requests and responses, suggesting payloads, and whether AI can out-hunt a human.
Bug Bounty Hunting Methodology 2025
A streamlined bug bounty methodology for 2025 covering reconnaissance, enumeration and testing, from subdomain discovery through JavaScript analysis.