Bug bounty hunting insights, strategies, and experiences from a full-time hunter on YesWeHack, HackerOne, and Intigriti.
LeHack was back at La Villette, in the middle of a heatwave, with the YesWeHack Live Event on Puma. Then something completely different: my first round table, in a room full of suits talking compliance and SOC 2. This week: LeHack, the round table, and where AI is taking hacking.
This year's hacker house: same crew, a villa in the south, and the first time we all met up since Claude landed in our lives. Now we all just point it at the scope, and we all surface the same bugs. The trip, the new hunting setup, and a whole lot of duplicates.
Two ways to use AI for bug bounty: full autonomy that drowns you in slop, or focused delegation that brings the fun back. Plus the 90 euros Claude burned on my card, and why the game still feels broken.
A week between a YouTube shoot, a hypnosis session, and thoughts on impact-driven goals in bug bounty and learning in the LLM era.
I published my bug bounty methodology this week. Plus a few thoughts on why work discipline comes and goes, and how I got pulled back into Minecraft after years away.
My article on the state of bug bounty blew up. A massive welcome to all the new readers, what to expect from this blog, and why I'm stepping back from the noise.
AI agents are flooding bug bounty with noise, burning out triagers, and pushing companies away. But the hunters who adapt will come out stronger. A full-time hunter's honest take on what's changing and what comes next.
I stopped forcing myself into one direction. Bug bounty, AI, building, exploring. This is a logbook, not a niche.
Bug bounty feels different with AI. I completed the Ecotrail 80km, the hardest challenge of my life. And I redesigned my entire blog with a new minimalist direction.
Presenting my new hardware hacking setup built with help from ChatGPT, videos, and articles. Plus updates on app development and knowledge gaps I need to fill.