From Scope to Payout: 9 Claude Code Plugins Worth a Hunter’s Terminal in 2026

30-Second Version: A wave of security-specific Claude Code plugins shipped this year — marketplaces, MCP servers, and skill packs built…Continue reading on Medium »
Read more...

log-horizon v0.9.0

Microsoft Sentinel SIEM Log Source Analyzer
Read more...

AI Agents Don’t Need Passwords. They Need Identity.

Imagine this.Continue reading on Medium »
Read more...

Leviathan — OverTheWire

The Leviathan wargame primarily focuses on basic reverse engineering, file permissions, exploiting SUID binaries, and understanding system…Continue reading on Medium »
Read more...

PortSwigger Web Security Academy: All API Testing Labs Solved (Full Walkthrough)

The API Testing labs in PortSwigger Web Security Academy go beyond classic web vulnerabilities and teach you how to attack the hidden…Continue reading on Medium »
Read more...

Burp AT Isn’t an AI Scanner It’s a Pentesting Agent

Meta description: A hands-on exploration of Burp AT, including its tools, project context, skills, autonomy modes, new Effort control…Continue reading on Medium »
Read more...

Inspect HTML — A Beginner-Friendly picoCTF Web Exploitation Walkthrough

IntroductionContinue reading on Medium »
Read more...

From Scope to Payout: 9 Claude Code Plugins Worth a Hunter’s Terminal in 2026
https://rajnamdev.medium.com/from-scope-to-payout-9-claude-code-plugins-worth-a-hunters-terminal-in-2026-13514526fa08?source=rss------bug_bounty-5

30-Second Version: A wave of security-specific Claude Code plugins shipped this year — marketplaces, MCP servers, and skill packs built…Continue reading on Medium » (https://rajnamdev.medium.com/from-scope-to-payout-9-claude-code-plugins-worth-a-hunters-terminal-in-2026-13514526fa08?source=rss------bug_bounty-5)

Watcher v3.5.3

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with MISP/TheHive integration.
Read more...

$5,000 Bug Bounty: Stealing Private API Keys via Arbitrary Origin Reflection in CORS

Cross-Origin Resource Sharing (CORS) misconfigurations remain one of the most reliable bug bounty findings. While many modern frameworks…Continue reading on Medium »
Read more...

Findomain v11.0.0-beta.2

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
Read more...

Wireshark: The Complete Beginner’s Guide to Network Traffic Analysis

Part 1 of the Network Security Tools SeriesContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french »
Read more...

$5,000 Bug Bounty: Stealing Private API Keys via Arbitrary Origin Reflection in CORS
https://medium.com/@t4nv1/5-000-bug-bounty-stealing-private-api-keys-via-arbitrary-origin-reflection-in-cors-9c6e0f2380a4?source=rss------bug_bounty-5

Cross-Origin Resource Sharing (CORS) misconfigurations remain one of the most reliable bug bounty findings. While many modern frameworks…Continue reading on Medium » (https://medium.com/@t4nv1/5-000-bug-bounty-stealing-private-api-keys-via-arbitrary-origin-reflection-in-cors-9c6e0f2380a4?source=rss------bug_bounty-5)

Wireshark: The Complete Beginner’s Guide to Network Traffic Analysis
https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/wireshark-the-complete-beginners-guide-to-network-traffic-analysis-44771b1bf542?source=rss------bug_bounty-5

Part 1 of the Network Security Tools SeriesContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french » (https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/wireshark-the-complete-beginners-guide-to-network-traffic-analysis-44771b1bf542?source=rss------bug_bounty-5)

Scrapegraph-ai v2.2.4

AI-powered web scraping library using LLMs to extract structured data from websites and documents with minimal configuration.
Read more...