
Full time Bug Bounty Hunter | 2x MVH YesWeHack LHE | @CaidoIO ambassador | Weekly newsletter at https://xitter.cf/t.co/25ZYGAYiQc
Paris
Joined March 2020
- Tweets549
- Following407
- Followers2K
- Likes1.8K
Pinned Tweet
I've been doing bug bounty for years.
I just published a long piece on what it actually feels like in 2026, and why something fundamental has shifted.
aituglo.com/state-of-bug-bou…
Would love to get your feedback on it here on X or directly on the blog
I’m not gonna lie, I love bug bounty hunting, and it’s thanks to bug bounty that I am where I am today. But man, at this point, the whole ecosystem feels completely broken… and unsustainable if things keep going this way.
Duplicates, lower bounties, endless triage times, and then more duplicates. The market feels completely oversaturated.
I love AI and use it for pretty much everything. And let’s be real, hunting without AI isn’t sustainable anymore either. The problem is that everyone now has access to the same (or almost the same) tools, which inevitably leads to similar findings.
Some people will say, “Just go back to manual hunting.” But my answer is simple: AI can find those same manual bugs, and often much more.
I’ve had the opportunity to get hands-on with Mythos and Daybreak Red, and I can tell you that these models are extremely good at finding complex vulnerabilities and chaining multiple bugs together.
So, to those who still believe manual hunters will maintain a significant edge, I think you’re either still in the denial phase or simply haven’t had the opportunity to experiment with these powerful models.
Let’s see what the future holds for bug bounty hunting. But I genuinely believe the next two years, at least, will be extremely challenging for anyone trying to make a living from it the way they used to.
I love this community and everything it has given me, but right now, I’m pretty pessimistic about where we’re heading.
Neuroscience says we get more dopamine from the journey than from reaching the goal. AI just automated the journey.
aituglo.com/aituweek-104/
I started vlogging my weeks. First one is out, French with English subs.
Loved making it. If you want to check it out :
aituglo.com/aituweek-103/
The most interesting, stimulating part of bug bounty is gone. Codex does the 15 hours of digging in 30 minutes now. It's impressive and a little sad. So I'm learning to find that stimulation somewhere else.
aituglo.com/aituweek-102/
Off on vacation. Recycled my old M1 Macbook Air into a light travel machine with Omarchy, so I can manage my agents and check bugs from a beach chair. Nomad setup done right.
aituglo.com/aituweek-101
100 weeks of posting.
From 3000 bucks and a one-way ticket to Asia, to living fully from this. Here's everything I learned.
aituglo.com/aituweek-100/
Just had the best income month of my life in bug bounty.
And honestly? It felt kind of empty.
Wrote about the weird gap between making more money than ever and slowly losing the meaning behind it.
aituglo.com/aituweek-99/
The problems in bug bounty are exactly the same as two years ago.
Focus a niche, pick the right program, dig deep. The only thing that changed is the speed.
New aituweek on what a week looks like right now. aituglo.com/aituweek-98/
I also made a first review of my @BusyFocusApp
I don't use Claude anymore.
It gave me too much of a hard time, and I have better today.
aituglo.com/aituweek-97/
Aituglo - Cassim retweeted
It’s Thursday,
Not bounty thursday but close enough, here’s a live hacking vlog!
youtube.com/watch?v=tJhuAINZ…
TLDR : Google invited me to Seoul for one of the most unique bug bounty events I've ever attended.
I joined an invite-only group of security researchers attempting to find vulnerabilities in their flagship AI products. Together we spent several days trying to break Google's flagship AI products and uncover real impactful security vulnerabilities and attack chains.
In this vlog you'll follow the entire journey, from arriving in Seoul, meeting the other hackers, and what it actually feels like to not only hang out with, but also compete against some of the best google VRP researchers in the world.
🏆 Results:
• 2nd Place Overall (Most Valuable Hacker)
• Most Creative Report Award
• And Multiple valid bug bounty submissions.
If you're interested in AI security, bug bounty hunting, offensive security, or just curious what these invite-only hacking events look like behind the scenes, this one's for you.
Ft hackers like @rez0__ @Rhynorater @0xLupin @busf4ctor @valent1nee @svennergr and many more,
New Aituweek: gutting my home lab down to a single tmux, why OpenAI's new models pulled me off Claude for a bit, and what motivation looks like when the agents do the hunting.
aituglo.com/aituweek-96/
Aituglo - Cassim retweeted
- Show Us Your Most Creative Caido + AI Workflow!
We're collecting stories about creatively using Caido with AI to discover, investigate, validate, or disprove bugs.
The best stories will be featured at DEF CON and earn some prizes from CTBB & @CaidoIO
forms.gle/kGBLJc166UV8AA226
Aituglo - Cassim retweeted
Next Stream 👉️ 5 p.m. CEST on Monday 20th of July in E.N.G.L.I.S.H. 🧨
We'll gather with @TheSytten (Staff) & @aituglo (Ambassador) to chat about the latest @CaidoIO Releases, Plugins, and Adoption of the Agentic Era!
- FYI 1 : Not the usual date & time (France & Quebec)
- FYI 2 : Not the usual language (English for abroad friends)
- FYI 3 : Have a nice say you sexy little bug 😘
- FYI 4 : Go update your wordpress yo, shit's on fire! *sigh*
Seeya at twitch.tv/thelaluka 💝
🤖 Made with AI
Aituglo - Cassim retweeted
Il lance une IA sur un programme avant de dormir. Au réveil : 10 bugs trouvés.
La moitié étaient des doublons.
@aituglo vit du bug bounty depuis 4 ans. On a parlé argent, IA, plateforme (@yeswehack, @Hacker0x01...) et de ce qui reste du métier.
▶️ youtu.be/aN1DahbPR4Q
Everyone posts about the perfect Claude setup. Nobody talks about what you do while it works.
Me: I scroll Instagram and spin up three more sessions.
Somewhere along the way, I stopped producing and started just consuming.
aituglo.com/aituweek-95/
Aituglo - Cassim retweeted
🐵 MonkeHacks #99
War, Dublin, Dopamine
#bugbountytips #hacktheplanet #BugBounty
monke.ie/p/monkehacks-99
I realized I've been using Claude wrong for months.
I just told it "keep going" on a loop and triaged the 50 bugs it threw at me to keep 1 or 2 potential leads.
You'd never manage a real intern that way. And I'm discussing it with other stuff on my Aituweek
aituglo.com/aituweek-94/
Very interesting setup from @Icare1337 !
Meet Jarvis, the Iron Man-inspired Claude Code setup steered by @Icare1337 🤖
This self-managing, multi-agent system has turbocharged his Bug Bounty workflow, but one rule remains ironclad: every finding needs human validation 👇
yeswehack.com/community/llms…
That’s the best pentesting report platform I ever tried, go check it
It's official: Vulnotes is live 🎉
The platform for your entire pentest engagement
✍️ Visual report editor
🔁 Built-in review workflow
📤 Export to docx, pdf, csv..
🤖 AI: screenshots → findings, translate, rewrite
🔌 API + MCP
👉 vulnotes.com












