BountySync Social was an absolute blast! 🤠 Last week at our new London office, we brought together researchers and security teams for a day packed with conversations, cocktails, and ice cream! 😄 A huge thank you to our host @appSecExp, guest speaker @CristiVlad25, and our very own Chris Holt and Greg Jenkins for leading a great multi-perspective discussion on AI and bug bounty! 😎 Thanks to everyone who joined us & see you at the next one! 👇

Caido projects bloat across engagements. Project Minify by @saltify_ Copy the essentials in one Project, Paste them in another. Bring only Scopes, Filters, Replay Sessions, Match & Replace rules and Environments. Give it a try 🔗 github.com/saltify7/Project-…

Bug hunters of Manchester — this one's for you! Join us for an in-person @HackerOne community meetup on 6th June. Network with fellow hackers, swap war stories, and level up your bug bounty game. h1.community/e/mgtbmn/ #BugBounty #HackerOne #Manchester #InfoSec

💀💀💀

time to lock in and pollute the training data boys

Being 1 report late is the peak bug bounty experience 😂

Big congratulations to everyone at the #1337UP1125 LHE in Belgium, and thank you to @intigriti for hosting such an amazing event! 🎉

I've created a @CaidoIO plugin to reduce Project File size by copying data (Scopes, Filters, Replay Sessions, M&R rules) into a new Project. Let me know if anyone has any issues! #BugBounty github.com/saltify7/Project-…

Finally made it to Top 100 on the All Time @intigriti Leaderboard!

I have released a new @CaidoIO plugin for table-based Authorization/Access Control testing. Feel free to check it out and let me know of any issues or feature requests! github.com/saltify7/Authify #BugBounty

Just scored another bounty @intigriti and hit 1234 rep Next goal: Top 100 on all-time leaderboard

This is 100% true in most things. Especially bug bounty.

Are you a Burp Repeater power user? The latest release introduces a new feature called 'Custom actions'. With these you can quickly build your own repeater features. Here's a few samples I made for you:

"I built a SAAS in 3 days with 0 coding knowledge using AI. Developers are obsolete." Their project:

Happy to have finished in the top 15 on the leaderboard for Q1 2025 - thanks @intigriti for the great platform!

Pentesters must rebrand themselves as Vibe Checkers.

Feel free to check out my recent bug bounty write-up!

I just published another bug bounty write-up detailing my recent experience learning XSS: "From ‘alert(1)’ to Account Takeover: A Story of 4-digit Bounties and Bypassing HTML Sanitisers" medium.com/@saltify/from-ale…

New bug bounty achievement: - Submit a report - 90 minutes later the program posts an announcement - "New domain added to Out of Scope" - *It's the same domain* - 🙂👍

What are the chances that as LLMs get better at coding and more production code is AI-generated, the most effective methodology for finding high-quality vulnerabilities switches from "What mistakes would a programmer make?" to "What do LLMs usually get wrong about security?"