Burp AT Isn’t an AI Scanner It’s a Pentesting Agent

Meta description: A hands-on exploration of Burp AT, including its tools, project context, skills, autonomy modes, new Effort control…Continue reading on Medium »
Read more...

Inspect HTML — A Beginner-Friendly picoCTF Web Exploitation Walkthrough

IntroductionContinue reading on Medium »
Read more...

From Scope to Payout: 9 Claude Code Plugins Worth a Hunter’s Terminal in 2026
https://rajnamdev.medium.com/from-scope-to-payout-9-claude-code-plugins-worth-a-hunters-terminal-in-2026-13514526fa08?source=rss------bug_bounty-5

30-Second Version: A wave of security-specific Claude Code plugins shipped this year — marketplaces, MCP servers, and skill packs built…Continue reading on Medium » (https://rajnamdev.medium.com/from-scope-to-payout-9-claude-code-plugins-worth-a-hunters-terminal-in-2026-13514526fa08?source=rss------bug_bounty-5)

Watcher v3.5.3

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with MISP/TheHive integration.
Read more...

$5,000 Bug Bounty: Stealing Private API Keys via Arbitrary Origin Reflection in CORS

Cross-Origin Resource Sharing (CORS) misconfigurations remain one of the most reliable bug bounty findings. While many modern frameworks…Continue reading on Medium »
Read more...

Findomain v11.0.0-beta.2

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
Read more...

Wireshark: The Complete Beginner’s Guide to Network Traffic Analysis

Part 1 of the Network Security Tools SeriesContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french »
Read more...

$5,000 Bug Bounty: Stealing Private API Keys via Arbitrary Origin Reflection in CORS
https://medium.com/@t4nv1/5-000-bug-bounty-stealing-private-api-keys-via-arbitrary-origin-reflection-in-cors-9c6e0f2380a4?source=rss------bug_bounty-5

Cross-Origin Resource Sharing (CORS) misconfigurations remain one of the most reliable bug bounty findings. While many modern frameworks…Continue reading on Medium » (https://medium.com/@t4nv1/5-000-bug-bounty-stealing-private-api-keys-via-arbitrary-origin-reflection-in-cors-9c6e0f2380a4?source=rss------bug_bounty-5)

Wireshark: The Complete Beginner’s Guide to Network Traffic Analysis
https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/wireshark-the-complete-beginners-guide-to-network-traffic-analysis-44771b1bf542?source=rss------bug_bounty-5

Part 1 of the Network Security Tools SeriesContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french » (https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/wireshark-the-complete-beginners-guide-to-network-traffic-analysis-44771b1bf542?source=rss------bug_bounty-5)

Scrapegraph-ai v2.2.4

AI-powered web scraping library using LLMs to extract structured data from websites and documents with minimal configuration.
Read more...

radare2 v6.2.2
https://kitploit.com/en/posts/github-radareorg-radare2-622

UNIX-like reverse engineering framework and command-line toolset

yj_nearbyglasses v1.0.10
https://kitploit.com/en/posts/github-yjeanrenaud-yj_nearbyglasses-v1010

attempting to detect smart glasses nearby and warn you

r2frida v6.2.2
https://kitploit.com/en/posts/github-nowsecure-r2frida-622

Radare2 and Frida better together.

NETworkManager v2026.9.7.0
https://kitploit.com/en/posts/github-borntoberoot-networkmanager-2026970

A powerful open-source tool for managing networks and troubleshooting network problems!

The Server Blinked — Race Conditions Part 1: Limit Overrun

By // l1m1nal_3ntr0pyContinue reading on Medium »
Read more...