Bug Bounty

Practical playbook for Email Address Manipulation — equivalence quirks, validation bypass, header/parser gaps, and staged Probe → Observe → Encode → Exploit testing, with the companion EAMG payload generator.

• Email Security
• Web Security
• Pentest
• Bug Bounty
• Account Takeover
• EAMG

Offline payload generator for authorized testing of email-address handling bugs — equivalence quirks, validation bypass, header/parser discrepancies, and related probes.

• Public
• Pentest
• Email Security
• Bug Bounty
• CLI
• Python

Practical IPv6-based SSRF techniques, real-world payloads, and testing notes for penetration testers and bug bounty hunters — where IPv4-only filters fail.

• SSRF
• IPv6
• Web Security
• Bug Bounty
• Pentest
• Medium

Automating Shodan-driven reconnaissance to surface high-signal targets and vulnerability clues across bug-bounty attack surfaces — queries, filters, and practical hunter workflows.

• Video
• Training
• Shodan
• Bug Bounty
• Recon
• Automation

Invited talk on bug bounty hunting — methodology, reporting quality, and practical lessons from real programs. Hosted on the Security Talks channel.

• Talk
• Bug Bounty
• Security Talks