https://j0n-harr150n.com/categories/security/ Recent content in Security on j0n-harr150n.com Hugo en-us Sun, 19 Oct 2025 10:34:01 -0400 https://j0n-harr150n.com/security/teaching-ai-to-hunt-what-humans-miss/ Sun, 19 Oct 2025 10:34:01 -0400 https://j0n-harr150n.com/security/teaching-ai-to-hunt-what-humans-miss/ <h1 id="teaching-ai-to-hunt-what-humans-miss-building-a-bug-bounty-brain-that-thinks-in-chains">Teaching AI to Hunt What Humans Miss: Building a Bug Bounty Brain That Thinks in Chains</h1> <h2 id="the-adhd-hunters-dilemma">The ADHD Hunter&rsquo;s Dilemma</h2> <p>In my <a href="https://j0n-harr150n.com/posts/ai-limitations-become-superpowers/">last article</a> , I talked about how AI limitations became superpowers—how Claude&rsquo;s 200k token limit forced me into better testing practices, and how AI bridged the gap between my ADHD brain and rigid corporate tools.</p> <p>But there&rsquo;s another invisible barrier I&rsquo;ve been hitting in bug bounty hunting, and it&rsquo;s one that&rsquo;s cost me actual money.</p> https://j0n-harr150n.com/security/the-bug-hunter-toolkit/ Sun, 29 Jun 2025 16:39:25 -0400 https://j0n-harr150n.com/security/the-bug-hunter-toolkit/ <h1 id="my-programming-adventures-with-google-gemini-and-code-assist">My Programming Adventures with Google Gemini and Code Assist</h1> <p>My initial foray into building a personal bug bounty toolkit started, as many programming adventures do, in the terminal. I envisioned a CLI akin to Metasploit, leveraging Python scripts with <code>mitmproxy</code> to manage traffic. While functional for basic tasks, it quickly became apparent that a command-line interface, no matter how well-structured with menus, has its inherent limitations. There&rsquo;s only so much you can effectively <em>visualize</em> and <em>interact with</em> in a text-only environment before the need for a richer, more intuitive user interface becomes undeniable.</p>