AI Hacking 101
HackTheBox Meetup #34
Attacking AI/LLM-powered apps — prompt injection (direct and indirect), system-prompt leakage, tool/exfil abuse, and the mindset for finding these bugs.
Talk Resources
Slides, hands-on labs and recordings from talks and workshops I’ve given. Grab whatever’s useful.
Client Side Hacking 101
HackTheBox Meetup #8
Attacking the browser side of web apps — DOM XSS, postMessage abuse, and other client-side primitives, with a hands-on lab.
Mastering 403 Bypass
HackTheBox Meetup #3
Techniques for turning a 403 Forbidden into a 200 OK — path confusion, header tricks, and method games, with a practice lab.
Hacking Web 101
HackTheBox Meetup #1
An intro to web application hacking — the core bug classes and the mindset to start finding them.