PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Super-charging Bug Bounty Hunting with the Power of AI

ethiack.com | vulnerability | #ai-security | #bug-bounty | #reconnaissance | #llm | #tooling | #subdomain-enumeration
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hands-on guide: using LLMs (via SimonW's terminal tool and PureDNS) to craft custom subdomain wordlists for bug bounty recon, speed exploitation, and improve reporting.
Published
Collected

Related coverage

blog · yeswehack.com
Subdomains Tools Review: a full and detailed comparison of subdomain enumeration tools
A full and detailed comparison of subdomain enumeration tools, reviewing their features and trade-offs to help bug bounty hunters pick the right utility for reconnaissance.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · blog.sentry.security
PIChef. A tool for Prompt Injection inspired by CyberChef
# PIChef. A tool for Prompt Injection inspired by CyberChef #### Sentry 08 Oct 2026 — 6 min read Share Baba Yaga represents PIChef as a keeper of dangerous recipes, mixing strange prompt-injection...
blog · netlas.io
Using Subfinder with Netlas Module
Step-by-step tutorial on connecting the Netlas module inside Subfinder: installing with Go, editing the config and provider-config files, running subdomain queries, and known restrictions.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
vulnerability · yeswehack.com
PimpMyBurp #4: Burp Suite extensions that should get your attention!
PimpMyBurp #4 collects 17 Burp Suite extensions worth attention: request helpers, vulnerability finders for JWT, SSRF and 403 bypasses, bridges to FFUF and SQLmap, and recon add-ons.
Back