Hive Five Watch | Bee Gagliardi

Replace Cloud Subscriptions With a Personal Intranet

Hive Five #290: Fear Builds the Future →

Ship Thousands of PRs a Month

Hive Five #289: Pace the Frontier →

Hear DHH on the Age of Agents

Hive Five #289: Pace the Frontier →

/Who picked these

I'm Bee Gagliardi. I bring systems closer to intent.

Every video here was a pick in the Bee's Knees, the five-link section of Hive Five. The full issue lands most Mondays. Join 4,300+ readers.

Keep scrolling ↓ About Bee →

Omarchy Quattro release

Hive Five #286: How Will You Measure Your Life →

Black Hat USA 2026: A Technical Reconstruction of the OpenAI-Hugging Face Incident

Hive Five #285: The End of an Era →

A Meta Engineer's Agentic Engineering Workflow

Hive Five #285: The End of an Era →

OpenCode Creator: Why Open-Source AI Models Dominate

Hive Five #283: The End of Reading Is Here →

Only Dangerously Smart People Think Like This

Hive Five #281: Blessed are the Curators →

The Story of C++

Hive Five #278: To Be Of Use →

My AI Note-taking workflows

Hive Five #277: The AI Paradox →

Soleio - The Geometry of Luck

Hive Five #277: The AI Paradox →

I Was Laid Off by Atlassian

Hive Five #275: Trying Not to Try →

Run Everything as a CLI

Hive Five #273: The Dark Wizard →

Recenter on Software Fundamentals

Hive Five #272: Thrive in Obscurity →

The Blueprint to Reset Your Life.

Hive Five #271: You Should Know →

How One Programmer's Pet Project Changed Software

Hive Five #271: You Should Know →

Japanese Principle for AI Fatigue

Hive Five #270: Impeccable →

Frontier Systems course with instructor and AMP Founder Anjney Midha.

Hive Five #269: Navigating the Matrix →

[un]prompted session recordings

Hive Five #269: Navigating the Matrix →

How Stripe Deploys 1,300 AI-Written PRs Per Week

Hive Five #268: Some Things Just Take Time →

How To Get Ahead Of 90% Of People in 2026.

Hive Five #268: Some Things Just Take Time →

I'm 42. If you're in your 30s, watch this.

Hive Five #268: Some Things Just Take Time →

Rez0's Top Claude Skill Secrets

Hive Five #267: Optimize for the sun →

$75,000,000 Crypto Wallet Bulk Hack

Hive Five #267: Optimize for the sun →

Best Technical Takeaways from Portswigger Top 10 2025

Hive Five #264: The Intelligence Premium →

Eric Dane's Final Message To His Daughters and The World

Hive Five #263: Take the Shot →

Jeff Dean on the AI Frontier

Hive Five #262: The AI Vampire →

Terminal Tricks for Agentic Workflows

Hive Five #262: The AI Vampire →

Teresa Torres demonstrates how she uses Claude Code as a $100/month AI employee to automate her entire workflow - from generating daily to-do lists by scanning Trello boards to co-authoring 9,000-word blog posts in just 1.5 days. She shares her three-layer context system using Obsidian and terminal windows that lets her delegate everything from research to task management while maintaining creative control over her writing voice.

Hive Five #255: How to Crush Your 2026 Goals →

Kelsey Hightower discusses the evolution of DevOps, explaining how platform engineering creates APIs between company needs and infrastructure rather than teaching everyone Kubernetes. He argues that while AI may improve tooling interfaces, the fundamentals of building reliable, deterministic systems remain unchanged, and emphasizes the importance of human skills and specialization over forcing everyone to become generalists.

Hive Five #254: The Fundamentals →

Former prisoner Wallo spent 20 years behind bars but used that time to educate himself, calling it "Princeton not prison." He shares how to break free from mental imprisonment by saying "f*** them" to others' opinions and choosing yourself first.

Hive Five #253: Princeton not prison →

The Syntax podcast team shares their favorite tech gifts for developers, from 3D printers and multi-tools to smart home gadgets and kitchen gear. This comprehensive gift guide covers everything from budget picks under $30 to premium monitors and clothing brands that last forever.

Hive Five #252: Cheesy, Spicy, Crunchy, Saucy →

Chef Dave Chang interviews Taco Bell's head of R&D Brett Pluskalowski about food innovation at scale, exploring how the chain creates 80+ new recipes annually for 7,000+ locations while working within strict constraints. The conversation reveals the surprising complexity behind fast food development, from the "four equities" (cheesy, spicy, crunchy, saucy) that guide menu decisions to creative inspiration sessions at car dealerships.

Hive Five #252: Cheesy, Spicy, Crunchy, Saucy →

Runnin' Down a Dream: How to Succeed and Thrive in a Career You Love

Hive Five #251: Runnin' Down a Dream →

MCP Hacking Guide

Hive Five #250: The Mountain Is You →

Deya overcame business fears by reading "The Mountain Is You" about self-sabotage, turning her planning passion into a $200K freelance career. The book taught her to identify self-destructive patterns and develop emotional intelligence for business success.

Hive Five #250: The Mountain Is You →

Shopify CEO Toby Lütke reveals how he uses Raycast's hyper key shortcuts and custom scripts to boost productivity, plus why he requires all 8,000 employees to use AI tools. The toolmaker shares his window management tricks and explains how non-engineers built powerful AI systems using no-code solutions.

Hive Five #249: Scope Creep →

Jason Fried of 37signals shares 26 years of product-building wisdom, emphasizing how great products feel like complete, unified ideas rather than assembled parts. He discusses staying true to your vision, the role of luck in success, and why running a business should serve making great products, not the other way around.

Hive Five #249: Scope Creep →

Vibecoding Promise and Peril

Hive Five #249: Scope Creep →

Two seasoned bug bounty hunters share game-changing workflow tips that could dramatically speed up your hacking efficiency. From FFUF's hidden interactive features to Caido automation tricks, these insider secrets will transform how you approach security testing.

Hive Five #249: Scope Creep →

Dennis Yang, Principal PM at Chime, demonstrates how he uses Cursor (an AI-powered IDE) as his complete workflow hub - writing PRDs in markdown, pushing them to Confluence/Notion via MCPs, reading and responding to comments with AI, creating detailed Jira tickets, and generating status reports. This showcases a fully AI-enabled product management workflow where he barely writes code but leverages Cursor's interoperability with tools like Jira, Confluence, and Figma to automate the busywork while staying in the loop for strategic decisions.

Hive Five #248: Medicine 3.0 →

How to Find Your Life’s Purpose

Hive Five #247: You Are How You Act →

Stefan Sagmeister, Grammy-winning designer behind album covers for Jay-Z and The Rolling Stones, reveals his unconventional creative process that starts with random objects instead of studying existing designs. He explains how forcing your brain to make new connections—like designing a drinking glass by starting with a sock—leads to truly original ideas rather than rehashing what already exists.

Hive Five #247: You Are How You Act →

Hustle culture lied to you (here’s a better way)

Hive Five #246: Just Talk To It →

Andrej Karpathy explains why AI agents will take a decade to mature, not just a year, due to fundamental limitations in current LLMs like poor continual learning and cognitive gaps. He argues we're building "digital ghosts" through internet imitation rather than true intelligence, while discussing the challenges of deploying AI safely at scale.

Hive Five #246: Just Talk To It →

Documentary on how Vite revolutionized JavaScript development by solving Webpack's slow build times, growing from a Vue-specific tool to the foundation powering most modern web frameworks. The film shows how Evan You's late-night prototype became the "United Nations of JavaScript," uniting competing communities around shared tooling infrastructure.

Hive Five #245: Frame of Preference →

Dan Koe, who has millions of followers across platforms, reveals his exact AI-powered content creation system that generates viral posts, newsletters, and YouTube videos from just 2 hours of daily writing. He shares specific prompts and workflows for using Claude and ChatGPT to systematically break down high-performing content, extract psychological patterns, and create endless variations while maintaining authenticity and avoiding generic AI-generated posts.

Hive Five #245: Frame of Preference →

Dan Wang, a Stanford researcher who lived in China from 2017-2023, argues that China's engineering-focused leadership has built superior infrastructure and manufacturing capabilities that could challenge U.S. global dominance. While China excels at physical engineering and industrial production, its social engineering failures like the one-child policy and authoritarian control drive many talented Chinese to seek opportunities abroad, creating a complex dynamic where China builds power while losing human capital.

Hive Five #243: Two Things Can Be True →

Commit Your Code Conference presents Aaron Francis's keynote on timeless career success strategies

Hive Five #243: Two Things Can Be True →

Waymore talk by xnl-h4ck3r

Hive Five #242: AI Agent →

Former nurse turned DevOps engineer reveals his "TECH framework" that helped him land jobs despite having zero experience and a 2-year career gap. The secret isn't just learning tools - you need hands-on experience through home labs, content creation on LinkedIn, and networking skills to stand out from hundreds of other applicants.

Hive Five #242: AI Agent →

AI will eliminate most jobs within 1,000 days, making capitalism obsolete as machines outperform humans in all cognitive work. Former hedge fund manager Emad Mostaque explains why GDP measurements are "insane," how the middle class faces extinction, and what economic system might replace capitalism when AI no longer needs human workers.

Hive Five #242: AI Agent →

How to Change Your Life

Hive Five #241: You Need To Be Bored →

Justin finally sits down with the great James Kettle to talk about

Hive Five #241: You Need To Be Bored →

Inside Claude Code: How an AI Native Team Actually Works

Hive Five #241: You Need To Be Bored →

Noah Brier built the ultimate AI-powered second brain by running Claude Code on a home server connected to his Obsidian notes, letting him research and code from anywhere on his phone. He shows how to use AI as a thinking partner that asks sharp questions, pulls from your entire knowledge base, and keeps learning logs - turning any device into a powerful research tool.

Hive Five #241: You Need To Be Bored →

David Heinemeier Hansson delivered a fiery Rails World 2025 keynote, ranting about how web development has regressed from 1999's 5-second FTP deploys to today's hour-long CI/CD nightmares. He unveiled Rails 8.1 features, launched "Omarchy" - his custom Linux distro for developers, and will give away Campfire for free.

Hive Five #240: Anti-Complexity →

Anthropic's Boris, creator of Claude Code, reveals how AI coding has evolved from simple autocomplete to autonomous agents that can build entire apps. He shares insider tips on using Claude Code effectively, from asking questions about codebases first to categorizing tasks by difficulty level.

Hive Five #240: Anti-Complexity →

7 fundamental shifts to dramatically improve ChatGPT output quality, addressing common frustrations with inconsistent results. Key strategies include editing prompts instead of piling on clarifications, using instruction levels (system/custom/chat), leveraging features like Canvas, and distinguishing between explore vs execute phases for better AI interactions.

Hive Five #240: Anti-Complexity →

Python: The Documentary traces Python's journey from Guido van Rossum's 1989 Christmas hobby project to becoming one of the world's most popular programming languages. The film explores how Python's emphasis on readability and simplicity revolutionized programming accessibility, powering everything from web development to AI research and even Mars rovers.

Hive Five #239: The No List →

Jack Cable, former CISA researcher and top bug bounty hunter, demonstrates a critical vulnerability in Cluely's desktop app that allowed any website to continuously screenshot users' screens.

Hive Five #238: AI and God →

Obsidian Bases transforms note-taking by creating powerful, offline databases from your notes with lightning-fast performance that rivals Notion. The game-changing "dynamic links" feature creates contextual sidebars that automatically update based on your current note, turning static notes into an interconnected thinking environment.

Hive Five #238: AI and God →

This fascinating deep dive traces the GUI's evolution from 1960s research labs to today's interfaces, revealing how visionary concepts from pioneers like Douglas Engelbart and Alan Kay were commercialized by Apple and Microsoft. The video explores why some original creators feel their revolutionary ideas were oversimplified into the desktop metaphor we're now stuck with.

Hive Five #237: Different Kinds of Smart →

Vercel CEO Guillermo Rauch explains how AI is transforming developers from coders into "product engineers" who focus on outcomes rather than implementation details. He shares how one enterprise customer now operates entirely through AI tools, sending prototypes back and forth in Slack with zero traditional coding or GitHub repos.

Hive Five #237: Different Kinds of Smart →

AI security expert Jason Haddix reveals how attackers are exploiting AI systems to steal sensitive data, customer lists, and trade secrets using surprisingly simple prompt injection techniques. The video demonstrates real-world hacking methods that bypass AI guardrails and shows companies are unknowingly sending confidential data to OpenAI through poorly secured AI integrations.

Hive Five #237: Different Kinds of Smart →

In "TCP to HTTP Full Course" by ThePrimeagen, he builds an HTTP server from scratch using TCP and Go, parsing requests byte by byte without libraries. This 5-hour deep dive reveals HTTP's inner workings, from header parsing to chunked encoding and binary data serving.

Hive Five #237: Different Kinds of Smart →

Anthropic's "Code with Claude 2025" recordings are live

Hive Five #235: Thinking Is Becoming a Luxury Good →

Jessica Mah became Y Combinator's youngest female founder at 19 after teaching herself to code at 10 and dropping out of high school at 15. She built inDinero from the ground up, graced Inc. magazine covers, then stepped down as CEO to start her venture studio Mahway.

Hive Five #235: Thinking Is Becoming a Luxury Good →

Dr

Hive Five #234: High Taste Tester →

Mathias shares practical archive testing methods to find security vulnerabilities in compressed files and extraction processes. Learn hands-on techniques for discovering flaws that attackers exploit in file compression systems.

Hive Five #234: High Taste Tester →

Casey Muratori's talk "The Big Oops" explores a 35-year mistake in software architecture: the adoption of object-oriented programming (OOP) hierarchies that rigidly mirror domain models.

Hive Five #234: High Taste Tester →

AI pioneer Andrew Ng shares practical strategies for accelerating development workflows using artificial intelligence tools. He demonstrates how teams can leverage AI to build products faster while maintaining quality and reducing traditional development bottlenecks.

Hive Five #234: High Taste Tester →

DHH discusses how AI will reshape programming workflows while speaking on Ruby on Rails' continued relevance in modern development. The creator of Rails shares insights on developer productivity, work-life balance, and adapting to rapid technological change.

Hive Five #232: Flounder Mode →

Armin explores agentic coding, a transformative software development approach where AI agents actively collaborate with humans. Drawing from his experience with Flask and Sentry, he describes this process as a real-time, dynamic interaction beyond traditional autocomplete tools, driven by advanced AI models trained in tool usage.

Hive Five #230: Agentic Coding →

Kent Beck explores the transformation of Test-Driven Development (TDD) and software engineering through the lens of AI coding tools. Drawing from his experiences at Facebook and current work with AI agents, he examines how emerging technologies are reshaping developer workflows, feedback mechanisms, and code creation processes.

Hive Five #229: Software Is Changing (Again) →

Andrej Karpathy discusses how AI, particularly large language models (LLMs), is fundamentally transforming software development. He explains the shift from traditional programming to AI-assisted and AI-generated code, highlighting the emergence of "Software 3.0" where developers increasingly collaborate with AI systems. Karpathy explores how LLMs are changing programming workflows, the implications for software engineering careers, and provides practical advice for developers to adapt to this new paradigm.

Hive Five #229: Software Is Changing (Again) →

Claude Code: How Two Engineers Ship Like a Team of 15

Hive Five #228: Surf the Front Edge of the Wave →

Hacking Windsurf: I Asked the AI for System Access — It Said Yes

Hive Five #228: Surf the Front Edge of the Wave →

In this Hyperlegible episode, Packy interviews Cate Hall about personal growth through discomfort

Hive Five #227: Developers, Developers, Developers. →

An interview with Steve Ballmer, the legendary former Microsoft CEO and owner of the LA Clippers, for an epic conversation covering his 34 years at Microsoft. Including the story behind "developers, developers, developers", the complexities of his relationship with Bill Gates (including a year where they didn't speak), and why he ultimately decided to step down as CEO.

Hive Five #227: Developers, Developers, Developers. →

NahamCon 2025 Keynote explores how AI and large language models are transforming cybersecurity, demonstrating practical applications of prompt engineering for penetration testing while examining both opportunities and challenges in this evolving landscape.

Hive Five #227: Developers, Developers, Developers. →

AI Engineer World's Fair 2025

Hive Five #227: Developers, Developers, Developers. →

Top bug bounty hunter Rhynorater shares 11 critical web, desktop, and IoT hacks

Hive Five #226: Mastery vs. Management →

Shopify's approach to careers is refreshingly simple: let people who are good at making things keep making things. They've rejected the corporate ladder nonsense where your only path forward is management. Instead, they've built a "mastery system" where craftspeople can advance by getting better at their craft.

Hive Five #226: Mastery vs. Management →

Hacking AI Series: Vulnus ex Machina: Part 2 (Ep.123)

Hive Five #225: The Way of Code →

Andreas Kling discusses Ladybird, a new browser engine built from scratch based on web standards, aiming to offer an independent alternative to Chromium-based browsers. He hopes to foster community involvement to ensure web compatibility.

Hive Five #225: The Way of Code →

Jasmin Landry (JR0ch17) discusses his journey to becoming a full-time bug bounty hunter, emphasizing continuous learning, a hacker mindset, and focusing on high-impact vulnerabilities. He also values work-life balance and shares insights on various bug classes and testing methodologies.

Hive Five #224: Happiest Country on Earth →

In this episode, Scott and Mark discuss the topic of feedback, prompted by Scott's recent experience of receiving harsh feedback on a TED talk he's preparing. They delve into how to build emotional resilience to receive feedback, differentiating between valid, actionable feedback and mere opinions.

Hive Five #224: Happiest Country on Earth →

Gumroad's CEO uses AI tools like v0, Cursor, and Devin to boost his team's productivity by 40x

Hive Five #221: Underdoing the Competition →

Web App Hacking 101 with Ciarán Monke Cotter

Hive Five #221: Underdoing the Competition →

Tae'lur Alexis shares her journey from fast food to cybersecurity, revealing how she taught herself to code and break into systems.

Hive Five #221: Underdoing the Competition →

How to Predict the Future With Kevin Kelly, Cofounder of Wired

Hive Five #221: Underdoing the Competition →

Learn about Neovim with Maria Solano (ex-Microsoft), a core maintainer!

Hive Five #220: The Post-Developer Era →

Flo, the CEO of Lindy.AI, demonstrates how to create AI agents using the Lindy platform to automate various business tasks and act as AI employees. He highlights the speed and ease with which these agents can be set up, suggesting that half of a business's operations can be automated in half a day.

Hive Five #220: The Post-Developer Era →

Lucas Crespo, the creative lead at Every, discusses the evolving role of design in the AI era, emphasizing the importance of art direction over pixel pushing. He explores how AI tools have transformed his creative process, allowing for more expressive and unique design approaches that prioritize emotional storytelling and visual experience over minimalist functionality.

Hive Five #219: Defeating Prompt Injections by Design →

In this interview, Linus Torvalds reflects on the 20-year journey of Git, discussing its origins as a solution to the Linux kernel's version control needs, its unexpected widespread adoption, and how its distributed design revolutionized software development. Torvalds created Git in just about 10 days, driven by frustration with existing version control systems and the need for a more efficient tool for kernel development.

Hive Five #219: Defeating Prompt Injections by Design →

Wes Bos explores the exciting potential of using AI with JavaScript, demonstrating how modern web technologies like WebGPU enable powerful AI models to run directly in the browser. He highlights five key reasons to use AI in JavaScript: speed, security/privacy, cost-effectiveness, UI integration, and workflow enhancement, showcasing multiple live demos that illustrate the practical applications of client-side AI technologies.

Hive Five #219: Defeating Prompt Injections by Design →

Meet Silicon Valley's #1 PR Expert: Lulu Cheng Meservey

Hive Five #218: AI 2027 & The End Of Children →

In this episode of Critical Thinking - Bug Bounty Podcast Joseph introduces Vulus Ex Machina: A 3-part mini-series on hacking AI applications. In this part, he lays the groundwork and focuses on AI reconnaissance.

Hive Five #218: AI 2027 & The End Of Children →

Max Joliff, an ultra trail runner from Southern California, competes in and ultimately wins the grueling Moab 240-mile ultramarathon after an intense race against Harry Sveres.

Hive Five #217: High Agency and the Beginner's Mind →

The Ultimate Guide to Writing with AI

Hive Five #217: High Agency and the Beginner's Mind →

Lex interviews ThePrimeagen: Programming, AI, ADHD, Productivity, Addiction, and God

Hive Five #216: The Hacker Always Wins →

Scott Hanselman talks about AI hype, arguing it should improve lives, not just be trendy

Hive Five #215: Prompt Your Way To Personal Growth →

Sualeh Asif, CTO and Co-Founder of Cursor, provides an in-depth look into the infrastructure and scaling challenges of their AI-powered coding platform, discussing their massive infrastructure that handles around 100 million model calls daily, complex database management, and the intricate process of handling large-scale distributed systems.

Hive Five #214: Pressing Buttons →

Discussion of the Portswigger Top 10 Web Security Research of 2024, covering various innovative security vulnerabilities and research techniques across different web technologies and protocols. The hosts break down each research piece, highlighting technical insights, potential exploitation methods, and the broader implications for web security.

Hive Five #214: Pressing Buttons →

How Karpathy effectively uses LLMs like ChatGPT, exploring various features, tools, and interaction modes across different AI platforms. He not only demonstrates practical applications of LLMs, but also explains how they work under the hood.

Hive Five #213: Agency > Intelligence →

Satya Nadella discusses Microsoft's groundbreaking advancements in AI, quantum computing, and gaming technology, highlighting the company's long-term strategic approach to technological innovation.

Hive Five #213: Agency > Intelligence →

The AI Engineer Summit Online features 30 talks about AI leadership, agents, coding, and more

Hive Five #212: Vibe Coding →

Google's AI Studio offers a comprehensive demonstration of their AI capabilities, including long-context processing, reasoning models, and real-time AI. Presented by the lead PM, Logan Kilpatrick, the video covers the Gemini models and AI Studio platform in detail.

Hive Five #211: Stop Working So Hard →

Overview of the Large Language Model (LLM) AI technology behind ChatGPT, detailing its training process and practical applications. Andrej, co-founder of OpenAI and former Senior Director of AI at Tesla, aims to enhance understanding of AI and empower effective use of its advancements.

Hive Five #210: We Are Destroying Software →

Guillermo Rauch, a coding pioneer, believes the future lies in holistic, full-stack engineers who can ideate, design, and harness AI's coding prowess to create remarkable products.

Hive Five #210: We Are Destroying Software →

In 1958, NASA was founded, and just 11 years later, we put man on the moon

Hive Five #209: New Space →

3 ways to escalate your XSS bugs to the next level, using reflected XSS and self XSS

Hive Five #209: New Space →

An interview with Johan Carlsson, a full-time bug bounty hunter who specializes in client-side bugs and is currently the #1 hunter on GitLab.

Hive Five #208: Nobody Cares →

'Everything is a Remix' explores the creative process, examining how all innovation is built on existing ideas. From music to technology, the series uncovers the origins of creativity and the interconnected nature of our world.

Hive Five #207: Brain Rot and One Man Armies →

@Bugcrowd Carnival of ChAIos HackerCup '24 winners @godiego_ , @sw33tLie, and @bsysop share their collaboration insights, critical vulnerabilities, and bounty hunting strategies.

Hive Five #206: AI Crash Course →

Watch @gf_256 reverse engineer all the Flare-On 2024 challenges from start to end

Hive Five #204: Make Change That Lasts →

Exposing the Honey Influencer Scam

Hive Five #204: Make Change That Lasts →

Jesse Itzler discusses how to live an epic life without setting rigid goals for the new year, in conversation with Sam Parr and Shaan Puri.

Hive Five #203: How To Live an Epic Life →

In the new gameshow Leet Heat, contestants are asked a rapid-fire series of questions that span across the full stack of modern web development. If they get the answers right, they earn points. But if they're wrong? The spice level goes up.

Hive Five #203: How To Live an Epic Life →

Documentary on Hackers Who Get Paid to Hack Companies

Hive Five #202: A Bias to Action →

An inspirational talk by Aaron called "Publish your work, change your life."

Hive Five #201: Egoless Engineering →

Justin and Roni dissect an old thread of Justin's talking about how best to start bug bounty to make $100k in the first year.

Hive Five #200: A Career Ending Mistake →

Do hard things

Hive Five #198: Do Hard Things →

The Nike ad "Stairs" explores the idea that winning doesn't always feel like winning, a powerful message about the challenges of perseverance.

Hive Five #197: Winning doesn’t always feel like winning →

In this interview with Louis Nyffenegger from PentesterLab, he advises against getting stuck when learning web security. Providing guidance on navigating the challenges of this field.

Hive Five #197: Winning doesn’t always feel like winning →

Best known for puncturing blockchain/crypto hype with her Web3 Is Going Just Great project, writer/researcher Molly White believes a better web is possible.

Hive Five #195: A Better Web Is Possible →

Bug bounty is a peculiar game between hunters, clients, and intermediaries

Hive Five #194: How The Internet You Loved Died →

Anthropic experts discuss the evolution and practical tips of prompt engineering, considering how the technique may change as AI systems advance.

Hive Five #193: Simplifiers Go Far, Complexifiers Get Stuck →

An interview with the Cursor Team discussing the Future of Programming with AI

Hive Five #192: AI Algorithms Encode Human Bias →

David Heinemeier Hansson, the creator of Ruby on Rails, unveiled Rails 8 with built-in Authentication, Propshaft, Solid Cache, Solid Queue, Solid Cable, Kamal, and Thruster, making it a complete "One Person Framework" that requires no additional Platform as a Service (PaaS) services.

Hive Five #191: It's More Fun To Be Competent →

Learn how to set up an iPhone to be minimalist and productive

Hive Five #190: Whatever You Think Your Limits Are, You’re Wrong →

Refine your recon methods or learn totally new ones as OrwaGodfather shares his approach

Hive Five #190: Whatever You Think Your Limits Are, You’re Wrong →

The Art of Recon: Strategies for Modern Asset Discovery

Hive Five #189: Do it because you can’t not. →

Andrej Karpathy, a founding member of OpenAI and former Tesla Autopilot leader, discusses the evolution of self-driving cars, Tesla’s Optimus humanoid robot, the bottlenecks of AI development today, and more.

Hive Five #188: You Are The Future →

LiveOverflow gave a talk on Android hacking at the University of Nevada, Las Vegas during DEF CON and Black Hat. During which he shares a "trick" to get into Android hacking and reverse engineering, which can be adapted to other topics.

Hive Five #188: You Are The Future →

Jack Dorsey created Twitter and Square

Hive Five #188: You Are The Future →

The X-Correlation between Frans & RCE - Research Drop

Hive Five #187: Hacker Mode →

Pieter Levels, a Dutch self-taught developer and digital nomad, has launched over 40 startups, several of which have achieved significant success. His approach emphasizes rapid shipping, iterative development, and strategic use of AI and automation.

Hive Five #186: Calling All Hackers →

In this first session of "Coding with Cursor", Sahil (Gumroad CEO) is joined by Josh, showcasing building a mini-tool in real-time while talking through the entire process of using AI to code.

Hive Five #184: Achieving Your Childhood Dreams →

Randy Pausch, a Carnegie Mellon professor, gave a moving last lecture on achieving childhood dreams before his passing. His lessons and advice inspired the packed auditorium and the world.

Hive Five #184: Achieving Your Childhood Dreams →

Taran, formerly the main editor of Linus Tech Tips, gives a masterclass on various aspects of creating effective YouTube content, drawing from examples and personal experience.

Hive Five #183: Firewalls Don't Stop Dragons →

Dwarkesh Patel, a prolific podcaster, uses AI tools like Claude and custom workflows to enhance his learning, thinking, and interview preparation.

Hive Five #182: The Great Recalibration →

Substrate is a crowdsourced project designed to enhance understanding, communication, and action in order to move humanity forward.

Hive Five #182: The Great Recalibration →

Gooby, a former neurosurgeon with 20 years of training and experience, left his career due to dissatisfaction and ethical concerns about the effectiveness of his work. He discovered that lifestyle factors like diet, exercise, and stress management were more crucial for patients' recovery than surgeries.

Hive Five #181: What the Dying Teach the Living →

Marcin Wichary, Director of Design at Figma, is passionate about pixel fonts and wants to share his extensive collection with you, going beyond mere nostalgia.

Hive Five #179: Gen AI: Too much spend, too little benefit? →

Maggie Appleton discusses the rise of local software, home-cooked apps, and barefoot developers, and the role the local-first community can play in building a local-first future.

Hive Five #179: Gen AI: Too much spend, too little benefit? →

AI Engineer World's Fair 2024 keynotes and CodeGen track, showcasing the latest advancements in AI engineering. Features talks on Open Challenges for AI Engineering, Llamafile: bringing AI to the masses with fast CPU, and much more.

Hive Five #178: Slow Down To Achieve More →

Full-time bug hunter Alex Chapman, known for his high criticality findings, shares his insights and secrets

Hive Five #178: Slow Down To Achieve More →

Sluicing Scripts with TomNomNom

Hive Five #177: Mastering the Balance Point →

Learning to wheelie at 49 Years Old

Hive Five #177: Mastering the Balance Point →

Legendary tennis player Roger Federer delivered the Commencement address at Dartmouth, sharing insights on achieving success in life.

Hive Five #176: Experts vs. Imitators →

NahamCon2024 talk by Zseano: .js Files Are Your Friends

Hive Five #176: Experts vs. Imitators →

"GraphQL is the New PHP" explores how bug bounty hunters can find security issues in GraphQL, drawing parallels to early PHP days. The talk shares tips and tricks to help identify vulnerabilities.

Hive Five #175: Search is dead — long live curation →

Ted Gioia, music historian and writer, discusses our cultural obsession with minimalism and the impact of modern distractions in a thought-provoking interview.

Hive Five #174: Dominate with LLMs: The Insider Playbook →

NahamCon 2024 Workshops: Capture The Flag 101, Acing WordPress Hacking with Code Review, The Art of Bypassing WAFs, and SQL Injection Tips & Tricks.

Hive Five #173: Where Are The Builders? →

Exploring secret web hacking knowledge, focusing on techniques that are usually not disallowed by the rules

Hive Five #172: The Worst Website In The Entire World →

Godfather Orwa's "The Power of Recon" talk explores top intel gathering and vulnerability spotting techniques

Hive Five #171: The Power of Recon →

In this episode, Johan Carlsson shares updates on his bug hunting journey, including a CSP bypass on GitHub and a critical finding in GitLab's pipeline. He also discusses his approach to using script gadgets.

Hive Five #170: No Web Without Women →

The video discusses how the creators hacked Google's AI system and received $50,000 in compensation

Hive Five #169: Excellent Advice for Living →

60 Hacking Commands You Need to Know: Discover essential hacking commands and techniques

Hive Five #168: They Want Your Data? EFF That. →

Learning in public with Personal Knowledge Management

Hive Five #168: They Want Your Data? EFF That. →

Mind Blowing Reverse Shell Demo with DNS data bouncing exfiltration using unconventional methods of exploiting the PowerShell Gallery.

Hive Five #167: The internet is ours →

Nicholas (Agarri) gave a follow-up talk to his original of 2013: Burp Suite Pro tips and tricks, the sequel

Hive Five #166: Mastery: Languages, Burp Suite, and APIs →

NahamSec's 2024 API Hacking Guide, including leveraging application access, analyzing JavaScript files, brute-forcing, and exploiting documentation.

Hive Five #166: Mastery: Languages, Burp Suite, and APIs →

Node.js: The Documentary

Hive Five #166: Mastery: Languages, Burp Suite, and APIs →

Learn By Building: Language Server Protocol

Hive Five #166: Mastery: Languages, Burp Suite, and APIs →

Sam Curry and friends hack the planet, including a remote hack of millions of cars

Hive Five #165: AppSec is fine →

How to use Trello as a versatile yearly planner by splitting the year in calendar weeks, yearly and quarterly goals, and leveraging fixed categories.

Hive Five #164: Craftsmanship is timeless →

Set up a Mac in 2024 for Power Users and Developers

Hive Five #163: Learn to build, then learn to break →

Top 10 free OSINT tools (with demos) for 2024

Hive Five #163: Learn to build, then learn to break →

This video introduces Fabric—an open-source project for augmenting humans using AI

Hive Five #162: Go Go Bug Bounty Gadgets →

In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss the concept of gadgets and how they can be used to escalate the impact of vulnerabilities. They talk through things like HTML injection, image injection, CRLF injection, web cache deception, and more.

Hive Five #162: Go Go Bug Bounty Gadgets →

Sisyphus and the Impossible Dream by Casey Neistat

Hive Five #160: Sisyphus and the Impossible Dream →

Using Data Science to win Bug Bounty

Hive Five #159: Using Data Science to win Bug Bounty →

The best Hacking Courses & Certs?

Hive Five #157: LLM: Full Stack Bootcamp & Web Attacks →

Find out how you get started with OSINT in 2024

Hive Five #157: LLM: Full Stack Bootcamp & Web Attacks →

Using the OSINT Mind State for Better Online Investigations, a talk by Nico Dekens (Dutch Osint Guy)

Hive Five #156: Hack Your Life using AI →

500k/yr as a Full-Time Bug Hunter & Content Creator, an interview with NahamSec

Hive Five #156: Hack Your Life using AI →

Hack your life (with demos) in 2024 using AI

Hive Five #156: Hack Your Life using AI →

Best Technical Content from Year 1 of the CTBB Podcast

Hive Five #155: Adversarial Machine Learning →

OTW's 2024 Roadmap to become a Master Hacker

Hive Five #155: Adversarial Machine Learning →

In this 28-Day Get Hired Challenge by Alyssa, she tackles one topic from her book, Cybersecurity Career Guide

Hive Five #154: Pipe Dreams →

rez0 talks about AI Application Security: Understanding Prompt Injection Attacks and Mitigations

Hive Five #153: How to Make 2024 The Best Year of Your Life →

Why Air Quality Matters

Hive Five #152: Never feed a beast you don't want to grow →

An interview with MVH, DEFCON Black Badge, and Googler Sam Erb

Hive Five #151: It’s later than you think →

Next Gen Hacker?

Hive Five #151: It’s later than you think →

InsiderPhD shares tips for approaching the Main App of a Bug Bounty Program

Hive Five #150: A Journey to Mastery →

Reverse Engineering RollerCoaster Tycoon using Ghidra, x64dbg, and Obsidian — I don't know about you, but I spent countless hours building my amusement park growing up.

Hive Five #150: A Journey to Mastery →

Keynote Session: "A Journey to Mastery" by Louis Nyffenegger, BSides Canberra 2023

Hive Five #150: A Journey to Mastery →

An interview with Bryce Case Jr

Hive Five #149: Hacking is a survival skill →

Everything about full-time bug bounty with Justin "Rhynorater" Gardner from the CTBB podcast

Hive Five #149: Hacking is a survival skill →

Japan’s Hidden Strength Culture You Didn’t Know Of: Chikara Ishi 力石

Hive Five #148: The OG Bug Bounty King →

Catching up on the weird world of LLMs, a talk by Simon Willison at North Bay Python 2023

Hive Five #148: The OG Bug Bounty King →

The OG Bug Bounty King: Frans Rosen

Hive Five #148: The OG Bug Bounty King →

AI Engineering 101 workshop

Hive Five #147: Take up space →

What types of DoS bugs will get you a bounty?

Hive Five #147: Take up space →

Ruby on Rails: The Documentary

Hive Five #147: Take up space →

Take up space is a beautiful and powerful talk by Shirley Wu at React Rally 2023

Hive Five #147: Take up space →

A talk by Orange Tsai at HEXACON2023: A 3-Year Tale of Hacking a Pwn2Own Target

Hive Five #147: Take up space →

HITB2023HKT D2T1 talk by Yassine Aboukir: Hunting For Amazon Cognito Security Misconfigurations

Hive Five #145: Using Discord Bots for OSINT Investigations →

Pieter Levels: The Indie Hacker’s Guide to AI Startups

Hive Five #145: Using Discord Bots for OSINT Investigations →

The Beginner's Guide to Blind XSS (Cross-Site Scripting)

Hive Five #145: Using Discord Bots for OSINT Investigations →

AI and hacking

Hive Five #144: Change is inevitable →

All things must come to an end, and change is inevitable

Hive Five #144: Change is inevitable →

The Circle of Unfixable Security Issues

Hive Five #144: Change is inevitable →

Attacking Secondary Contexts in Web Applications by Sam Curry

Hive Five #143: The hacker’s guide to securing your organization →

Rails World 2023 Opening Keynote by David Heinemeier Hansson

Hive Five #143: The hacker’s guide to securing your organization →

Bridging the Gap: Integrating Digital Forensics with Open-Source Intelligence (Keynote)

Hive Five #142: Hacking Full Time →

SQL Injecting Beyond Strict Filters: Union without comma

Hive Five #142: Hacking Full Time →

The Bug Bounty Podcast is back with it’s 215th episode: DEF CON, HardwearIO, Broken Caching, and Dropping Headers.

Hive Five #141: There’s work and there’s your life’s work →

Hacker Tweets Explained

Hive Five #140: A new recon source: DuckDuckGo Tracker Radar →

OFFZONE Moscow talk: HTTP Request Splitting vulnerabilities exploitation by Sergey Bobrov

Hive Five #140: A new recon source: DuckDuckGo Tracker Radar →

DEF CON 31 War Stories - A Series of Unfortunate Events by Ben Sadeghipour and Corben Leo

Hive Five #139: Challenges and Benefits of the Bug Bounty Ecosystem →

Helping 3M+ children receive diapers with Ruby

Hive Five #139: Challenges and Benefits of the Bug Bounty Ecosystem →

DEF CON 31 - Weaponizing Plain Text ANSI Escape Sequences as a Forensic Nightmare by STÖK

Hive Five #139: Challenges and Benefits of the Bug Bounty Ecosystem →

A chat with Charlie Eriksen, creator of Jswzl, about bug bounty, cybersecurity, automation, and more

Hive Five #137: Mining Massive Datasets →

5 Open Source Security Tools All Developers Should Know About with Aviram Shmueli

Hive Five #137: Mining Massive Datasets →

A Totally Tubular Lock Lesson, a DEF CON 31 presentation and workshop by Deviant Ollam

Hive Five #136: The Prompt Injection Primer for Engineers →

DEFCON 31 Recon Village talks are up and ready for you to consume

Hive Five #135: The A.I. Dilemma →

The A.I

Hive Five #135: The A.I. Dilemma →

AWS Security Series: IAM Vulnerable

Hive Five #132: The key to succeed in bug bounty →

The key to succeed in bug bounty

Hive Five #132: The key to succeed in bug bounty →

NahamSec released all of the NahamCon2023 talks

Hive Five #132: The key to succeed in bug bounty →

Discover millions of leaked API keys with Forager — Although I shared the release of this tool last week, Dylan’s videos are always a must-watch.

Hive Five #131: The Art of Deception →

Secrets of an Android App Bug Hunter

Hive Five #130: New JavaScript analysis tools, and DEFCON advice →

Deviant’s DEFCON Advice

Hive Five #130: New JavaScript analysis tools, and DEFCON advice →

A hacker interview with Ryan Montgomery aka 0day

Hive Five #129: I miss the old internet →

Live web app hacking using Caido with it’s co-founder sytten

Hive Five #129: I miss the old internet →

Yassine talks about the road to Most Valuable Hacker and working while traveling the world

Hive Five #128: The Rise of the AI Engineer →

Hacking Google Cloud?

Hive Five #127: Authentication vulnerabilities, Hacking Google Cloud, and Wordlists →

Authentication Vulnerabilities - Complete Guide

Hive Five #127: Authentication vulnerabilities, Hacking Google Cloud, and Wordlists →

Casey Ellis: Pioneering The Bug Bounty Platform To Empower Ethical Hackers

Hive Five #126: NahamCon2023, Networking Fundamentals, and Pioneering The Bug Bounty Platform →

How to perform an account takeover?

Hive Five #126: NahamCon2023, Networking Fundamentals, and Pioneering The Bug Bounty Platform →

NahamCon2023’s Bug Bounty Village with 4 workshops: Capture the Flag 101, Ethereum Smart Contract Hacking, Automation tricks for Burp Suite Pro, and Linux & Windows PrivEsc Workshop.

Hive Five #126: NahamCon2023, Networking Fundamentals, and Pioneering The Bug Bounty Platform →

How IppSec rebuilds Parrot and uses Ansible to script customizations to his image

Hive Five #125: When you lie for a living, AI dark ages, and AppSecSchool →

Learn bug bounty hunting with these resources

Hive Five #125: When you lie for a living, AI dark ages, and AppSecSchool →

When you lie for a living, everyone & everything is hackable

Hive Five #125: When you lie for a living, AI dark ages, and AppSecSchool →

Troy Hunt discusses several aspects of cybersecurity, including the importance of his website, Have I Been Pwned, in notifying users of data breaches in which their information has been compromised.

Hive Five #124: Scraping Kit and the Benefits of Creating in Public →

An interview with Shubham Shah, one of the hackers people look up to in the bug bounty space, and an expert in source code review who regularly finds 0days.

Hive Five #124: Scraping Kit and the Benefits of Creating in Public →

The highly anticipated sequel to Nicolas Gregoire’s epic Burp Suite Pro tips and tricks talk

Hive Five #123: 100 Bug Bounty rules and Burp Suite Pro tips & tricks talk v2 →

BSidesSF 2023 talk by Alethe Denis titled HALT AND CATCH FIRE: Social Engineering CTFs for fun to a job as a Professional Red Team Social Engineer. While the contests were fun and seemingly glamorous, the reality of SE for money was much different.

Hive Five #123: 100 Bug Bounty rules and Burp Suite Pro tips & tricks talk v2 →

Security Fest 2023 contains two days filled with great talks by internationally renowned speakers on some of the most cutting edge and interesting topics in technical information security.

Hive Five #123: 100 Bug Bounty rules and Burp Suite Pro tips & tricks talk v2 →

How to turn a write-based path traversal into a critical

Hive Five #122: STÖK is back, WTF is information disclosure, and a $1MM bounty →

STÖK is back!

Hive Five #122: STÖK is back, WTF is information disclosure, and a $1MM bounty →

In this bug bounty basics, InsiderPhD covers information disclosure

Hive Five #122: STÖK is back, WTF is information disclosure, and a $1MM bounty →

NahamSec made $100,000 in two months

Hive Five #121: IIS Auth Bypass, Securing AI, and making 100k in 2 months →

Securing AI - Prompt Injection Defense

Hive Five #121: IIS Auth Bypass, Securing AI, and making 100k in 2 months →

DevTernity 2019 talk by Scott Hanselman on Scaling Yourself

Hive Five #120: Don’t be the best. Be the only. →

LangChain Prompt Injection Webinar where Prompt injection is explained by Simon Willison with video, slides, and a transcript.

Hive Five #120: Don’t be the best. Be the only. →

Youssef Sammouda, the top-ranked Facebook bug bounty hunter, shares his experiences and approaches to bug hunting in this podcast. He discusses his preference for Facebook’s higher payouts and faster payment time.

Hive Five #120: Don’t be the best. Be the only. →

Bug Bounty Basics: Cross-site Scripting

Hive Five #120: Don’t be the best. Be the only. →

CodeQL query to detect RCE via ZipSlip resulting in a $5,500 bounty from GitHub Security Lab

Hive Five #119: Deep Dive OSINT and Finding XSS in a Million Websites →

Deep Dive OSINT (Hacking, Shodan and more) with Rae Baker

Hive Five #119: Deep Dive OSINT and Finding XSS in a Million Websites →

“Easiest” Beginner Bugs?

Hive Five #118: Easiest beginner bugs, the Anatomy of Autonomy, and BrokenSesame →

Hacker Interviews: ArchAngelDDay

Hive Five #118: Easiest beginner bugs, the Anatomy of Autonomy, and BrokenSesame →

Attacking LLM - Prompt Injection

Hive Five #117: Procmon for macOS, Attacking LLM, and MalDev Academy →

InsiderPhD’s Hacking Setup and How to Use It (Firefox/Burp Community)

Hive Five #116: Creating with Git, CodeQL zero to hero, and Websocket are a pain →

Why does DNS always break the internet?

Hive Five #115: AI models become a threat to hackers, 2023 Web Hacking Roadmap, and why DNS always breaks the internet →

2023 Web Hacking Roadmap - How To Bug Bounty

Hive Five #115: AI models become a threat to hackers, 2023 Web Hacking Roadmap, and why DNS always breaks the internet →

Our Future As Hackers Is At Stake!

Hive Five #115: AI models become a threat to hackers, 2023 Web Hacking Roadmap, and why DNS always breaks the internet →

How to Lose a Pentester in 10 days

Hive Five #114: How to Lose a Pentester in 10 days, Badsecrets, and Account Takeover in OpenAI →

NahamCon2022EU: Managing a Bug Bounty Program From a Hacker’s Perspective by 0xlupin

Hive Five #114: How to Lose a Pentester in 10 days, Badsecrets, and Account Takeover in OpenAI →

Linus Tech Tips was hacked

Hive Five #114: How to Lose a Pentester in 10 days, Badsecrets, and Account Takeover in OpenAI →

How does Bug Bounty work anyway?

Hive Five #113: How to Hack: A Step-by-Step Journey, acropalypse, and 25 years of curl →

Faster than Rust and C++: the PERFECT hash table

Hive Five #112: NahamSec quit recon, Top Web3 developer mistakes, and a Docker clinic →

Top 6 Web3 developer mistakes (and how to prevent them)

Hive Five #112: NahamSec quit recon, Top Web3 developer mistakes, and a Docker clinic →

NahamSec quit recon… and made $10,000 in bounties

Hive Five #112: NahamSec quit recon, Top Web3 developer mistakes, and a Docker clinic →

The best hacking courses & certifications

Hive Five #111: Roadmap to Pentester success, and how to explain a layoff →

Introduction to Nuclei

Hive Five #110: Nuclei Foundation Series, OWASP needs to evolve, and Share the Spotlight →

How to Bug Bounty in 2023 by NahamSec

Hive Five #109: Find Linux Kernel bugs and Escape, How to Bug Bounty in 2023, Server-side prototype pollution →

VPNs, Proxies and Secure Tunnels Explained (Deepdive)

Hive Five #109: Find Linux Kernel bugs and Escape, How to Bug Bounty in 2023, Server-side prototype pollution →

Recon2022: Breaking the Glass Sandbox - Find Linux Kernel Bugs and Escape

Hive Five #109: Find Linux Kernel bugs and Escape, How to Bug Bounty in 2023, Server-side prototype pollution →

Yassine, the keynote speaker at BSides Ahmedabad 2022 talks about bug bounty hunter mindset

Hive Five #108: Bug Bounty Hunter Mindset, Android Malware Analysis course, and the Power of CSS injection →

Hussein Daher talks about “Bug Bounty On Steroids” at BSides Ahmedabad 0x03

Hive Five #108: Bug Bounty Hunter Mindset, Android Malware Analysis course, and the Power of CSS injection →

A three day course on Android Malware Analysis presented by Dartmouth and the Android security team

Hive Five #108: Bug Bounty Hunter Mindset, Android Malware Analysis course, and the Power of CSS injection →

Till REcollapse: Fuzzing the Web for Mysterious Bugs by @0xacb (NahamCon2022EU)

Hive Five #107: The Anti-Recon Recon Club, Till REcollapse, and Privacy Guides. →

Ethernaut - 0 - Hello Ethernaut walkthrough

Hive Five #106: Fearless CORS, JavaScript Analysis, and Subdomain Takeovers →

Subdomain Takeover with HuskyHacks

Hive Five #106: Fearless CORS, JavaScript Analysis, and Subdomain Takeovers →

How to Be An Ethical Hacker: 2023 Edition

Hive Five #105: Mastering Broken Access Control and An Ethical Hacker's Guide →

Broken Access Control complete guide

Hive Five #105: Mastering Broken Access Control and An Ethical Hacker's Guide →

LevelUpX - Series 14: Finding and Exploiting Hidden Functionality in Windows DLLs with Nerdwell

Hive Five #105: Mastering Broken Access Control and An Ethical Hacker's Guide →

Live Recon: Interviewing A Hacker - Shashank (cyberboyindia)

Hive Five #105: Mastering Broken Access Control and An Ethical Hacker's Guide →

Live Recon Sundays is a series of interviews with hackers, and in this episode, the guest is @gf_256 discussing smart contract security

Hive Five #104: 2022 High-Profile Breaches & 2023 Security Recommendations →

Live Recon Interview in the Smart Contract Series with ret2jazzy

Hive Five #103: 2022 CVE data review and bypass firewalls with of-CORs →

Hachyderm’s Kris Nova on running a Mastodon Server

Hive Five #102: Running a Mastodon server, Reverse Prompt Engineering, and 2022 reviews →

Meth to Netflix: ThePrimeagen story

Hive Five #101: Read the Bleeping RFC, Meth to Netflix, and Speedrunning Web3 Bug Hunts →

RTFR (Read The Bleeping RFC), a talk by securinti @ NahamCon 2022 EU

Hive Five #101: Read the Bleeping RFC, Meth to Netflix, and Speedrunning Web3 Bug Hunts →

Command-Line Data-Wrangling by Tomnomnom

Hive Five #100: 2022 OSCP study guide, command-line data-wrangling, and offsec tools →

Which XSS payloads get the biggest bounties?

Hive Five #100: 2022 OSCP study guide, command-line data-wrangling, and offsec tools →

Story of an RCE on Apple Through Hot Jarr Swapping by Frans Rosen

Hive Five #100: 2022 OSCP study guide, command-line data-wrangling, and offsec tools →

Cori shows us how easy it is to set up a phishing campaign and hack companies

Hive Five #99: Ethical hacking in 15 hours, the secret of bug bounty automation, and exploring prompt injection attacks →

Jupyterthon 2022 Day 1 of Infosec Jupyterthon 2022 Conference

Hive Five #99: Ethical hacking in 15 hours, the secret of bug bounty automation, and exploring prompt injection attacks →

Ethical Hacking in 15 Hours - 2023 Edition - Learn to Hack!

Hive Five #99: Ethical hacking in 15 hours, the secret of bug bounty automation, and exploring prompt injection attacks →

Learning Lockpicking while Blind, Divergent, and More

Hive Five #97: Email Graffiti, The anatomy of a MP4 file, and Learning lockpicking while blind, divergent, and more →

Email Graffiti: hacking old email

Hive Five #97: Email Graffiti, The anatomy of a MP4 file, and Learning lockpicking while blind, divergent, and more →

XMPP Stanza Smuggling or How I Hacked Zoom (talk) - XMPP is a popular instant messaging protocol based on XML that is used in messengers, online games and other applications.

Hive Five #96: How to build a cloud hacking lab, the return of NahamSec, and remediation archeology →

How to Build a Cloud Hacking Lab - How easy is it to build your own cloud hacking lab?

Hive Five #96: How to build a cloud hacking lab, the return of NahamSec, and remediation archeology →

How much money Grzegorz made in his 1st year of bug bounty?

Hive Five #96: How to build a cloud hacking lab, the return of NahamSec, and remediation archeology →

What is a Server?

Hive Five #95: What is a server, hiring resources, and a Twitter refugee’s guide to Mastodon →

phillipwylie Talks About His Favorite Tools, Switching Careers, And Pentesting

Hive Five #94: XSS Hunter is being deprecated, what sucks about recon, and DevOps is bullshit →

HTTP/3 Connection Contamination Made Simple - James Kettle (albinowax)

Hive Five #94: XSS Hunter is being deprecated, what sucks about recon, and DevOps is bullshit →

DEF CON 30 videos are available

Hive Five #93: Supercharge your hacking, web app checklist, and community →

Keynote - Why web tech is like this - Steve Sanderson

Hive Five #92: Why web tech is like this, Chrome browser exploitation, and hacker healthcare →

$29,000 GitLab - Arbitrary File Read using symlinks

Hive Five #92: Why web tech is like this, Chrome browser exploitation, and hacker healthcare →

The Origin of Cross-Site Scripting (XSS) - Hacker Etymology

Hive Five #90: Taking control of your time, RCE via GitHub import, and the origin of XSS →

Rhynorater Talks About Grafana SSRF, Picking Bug Bounty Targets, and His Favorite Hacking Tools!

Hive Five #90: Taking control of your time, RCE via GitHub import, and the origin of XSS →

LevelUpX - 8 Ways to (Almost) Never Get a Dupe Again with InsiderPhD

Hive Five #89: Never dupe again, best bugs people have found, and hacking Google →

Fuzzing XSS Sanitizers for Fun and Profit | Tom Anthony

Hive Five #88: The Age of Universal XSS, and One Takeover to Rule Them All →

The Age of Universal XSS

Hive Five #88: The Age of Universal XSS, and One Takeover to Rule Them All →

How a teenager hacked Uber

Hive Five #87: How to turn security research into profit, How a teenager hacked Uber, and Creating a CTF challenge →

Client-side desync vulnerabilities - a breakthrough in request smuggling techniques

Hive Five #86: Mental Hacking, Fast-Foodification, and Firefox OOB to RCE →

HOW DID THIS HAPPEN!? (13370822 LHE VLOG)

Hive Five #86: Mental Hacking, Fast-Foodification, and Firefox OOB to RCE →

Mental Hacking Ep 1 - How to Improve in Bug Bounty / Web Security?

Hive Five #86: Mental Hacking, Fast-Foodification, and Firefox OOB to RCE →

Returning to Defcon Post FBI Arrest

Hive Five #85: Three JavaScript Security Legends & Full-time bug bounty vs Salaried position →

Gamified Hacking Ep 7 | How Hunting Broken Access Control Can Be EASY! Part 1 PwnFox

Hive Five #84: Let's Hack GraphQL, A ‘Master Class’ in Bug Bounty, and How to Be Happy →

NahamSec - Attack Surface Management Series - EP2 - Shodan

Hive Five #84: Let's Hack GraphQL, A ‘Master Class’ in Bug Bounty, and How to Be Happy →

Z-winK University - Let's Hack GraphQL - Introspection, Playground, Queries, Mutations, and Fun!

Hive Five #84: Let's Hack GraphQL, A ‘Master Class’ in Bug Bounty, and How to Be Happy →

Kernel Exploitation on HEVD #2 : Write What Where (Arbitrary Overwrite)

Hive Five #83: How to prepare for a tech talk, IDORs and UUIDs, and Web Hacker’s Weapons →

Snyff Talks About Hacking, Learning and Creating PentesterLab

Hive Five #82: Must-watch talks at DEFCON, how to become an expert, and how to ask and get a yes →

seclilc Talks About Hacking, Recon and Breaking Into Cybersecurity

Hive Five #81: Self-Learning Reverse Engineering in 2022, Hacker Summer Camp, and Interstitial Journaling →

Online No One Knows Youre Dead - ShmooCon 2016

Hive Five #81: Self-Learning Reverse Engineering in 2022, Hacker Summer Camp, and Interstitial Journaling →

Self-Learning Reverse Engineering in 2022

Hive Five #81: Self-Learning Reverse Engineering in 2022, Hacker Summer Camp, and Interstitial Journaling →

The Same Origin Policy - Hacker History

Hive Five #80: Most common smart contract vulnerabilities, practical deep learning course, and ProjectDiscovery’s Best Kept Secrets →

Diana Initiative 2020 - Tracy Z. Maleeff - Empathy as a Service to Create a Culture of Security

Hive Five #79: Mediocre security engineers and Empathy as a Service →

BSidesSF 2022 - Keynote - We Need More Mediocre Security Engineers (Jackie Bow)

Hive Five #79: Mediocre security engineers and Empathy as a Service →

Bug Bounty Redacted #5 - Second Order Subdomain Takeovers & Logic Bug DoS

Hive Five #79: Mediocre security engineers and Empathy as a Service →

Reversing Malware - Also How is APT 29 Successful with This Phishing Technique

Hive Five #78: Dirty dancing, Reversing Malware, and Dorking on Steroids →

alh4zr3d talks about his background, Red Teaming, Security Certificates and more

Hive Five #78: Dirty dancing, Reversing Malware, and Dorking on Steroids →

A Deeper Look at Hacking Laws

Hive Five #77: Virtual Sticker Swap, Bot Bounty, and Mid-Year Reflection & Planning →

MetaMask - stealing ETH by exploiting clickjacking - $120,000 bug bounty

Hive Five #77: Virtual Sticker Swap, Bot Bounty, and Mid-Year Reflection & Planning →

ToolTime - WayMore (Historical Content Discovery)

Hive Five #77: Virtual Sticker Swap, Bot Bounty, and Mid-Year Reflection & Planning →

Hacking a Samsung Galaxy for $6,000,000

Hive Five #76: Millions of secrets exposed, focus rituals, become a Nmap pro →

Bug Bounty 101 #23 - From $0 to $150,000/mo - Hacking Methodology & Mindset

Hive Five #75: InfoSec: The Good, the Bad and the Ugly →

Bug Bounty Redacted #4 - Writing to S3 buckets & Insecure JWT Implementation

Hive Five #75: InfoSec: The Good, the Bad and the Ugly →

Pentesting vs. Bug Bounty vs. Pentesting ???

Hive Five #75: InfoSec: The Good, the Bad and the Ugly →

Bug Bounty 101 #21 - Hacking Pinterest for Two Weeks

Hive Five #74: Emulating Reality, Linking Your Thinking, and Data Engineers →

Self XSS we’re not so different you and I - Mathias Karlsson - Security Fest 2017

Hive Five #74: Emulating Reality, Linking Your Thinking, and Data Engineers →

Best Hacking Podcast in the world?

Hive Five #73: Best new infosec projects, how to add value, web hacking summer school →

Could I Hack into Google Cloud?

Hive Five #73: Best new infosec projects, how to add value, web hacking summer school →

YassineAboukir Talks About His Recon Flow, Bug Bounty, Mental Health and More

Hive Five #72: Learning Blockchain, Delegating, running Docker without Docker Desktop →

Learn Blockchain, Solidity, and Full Stack Web3 Development with JavaScript – 32-Hour Course

Hive Five #72: Learning Blockchain, Delegating, running Docker without Docker Desktop →

Bug Bounty Redacted #3 - Hacking APIs & XSS, SQLi, WAF Bypass in a regional web application

Hive Five #71: First Times →

NahamCon2022 - infosec_au - Finding 0days in Enterprise Web Applications

Hive Five #71: First Times →

NahamCon2022 - Jason Haddix (jhaddix) - The Bug Hunter’s Methodology: Application Analysis v1

Hive Five #70: Anti-fragile →

Nahamcon 2022 - insecurenature - Cloud hacking - malware not needed

Hive Five #70: Anti-fragile →

Q: How to write a BUG BOUNTY report that actually gets paid?

Hive Five #70: Anti-fragile →

Solving all Web CTF tasks from NahamCon

Hive Five #69: I am. All of us. →

Mindset After 7 years of Bug Bounty - IWCON-S22 Talk by Hussein Daher

Hive Five #68: Blessed →

OSINT - You can't hide // Your privacy is dead // Best resources to get started

Hive Five #68: Blessed →

Bug Bounty hunters has made ridiculous amounts of $$ from known DNS techniques..

Hive Five #68: Blessed →

Introduction to Z-winK University

Hive Five #67: The more you know →

OffensiveCon22 - Mark Dowd- Keynote -How Do You Actually Find Bugs?

Hive Five #67: The more you know →

Learn with j3ssiejjj - Automating Recon at scale using Osmedeus

Hive Five #66: How to Take Over the World →

Bug Bounty Redacted #2 - Third Party Subdomain Takeover & Exposed Admin Interfaces

Hive Five #66: How to Take Over the World →

Minecraft, But It's Reverse Engineered...

Hive Five #65: Nahomies →

ComfyCon AU 2022

Hive Five #65: Nahomies →

We're spoiled this week with not one, but two Zseano videos:

Hive Five #64: Ego is the enemy →

Hacking PayPal and TikTok (legally) // Featuring Ben Sadeghipour Nahamsec

Hive Five #64: Ego is the enemy →

$100k Hacking any website in Safari with uXSS - a 0-day chain

Hive Five #63: The Power of Now →

rootxharsh Talks About Recon, Finding A $50,000 Remote Command Execution in Apple, and more!

Hive Five #63: The Power of Now →

LiveOverflow has been Hacking for 10 Years! (Stripe CTF Speedrun)

Hive Five #63: The Power of Now →

Bug Bounty Redacted #1 - Exposed Redis and HAProxy

Hive Five #62: Valuable lessons →

Alissa Knight Talks About API Hacking, Car Hacking, Creating Content for Hackers and More

Hive Five #62: Valuable lessons →

Bounty Thursdays - live #3 (news/tools and community)

Hive Five #62: Valuable lessons →

How to Use Bug Bounty to Help Your Career!

Hive Five #61: Remember the Pac-Man rule →

Bounty Thursdays - live #2

Hive Five #60: Start with Why →

OAuth 2.0 and OpenID Connect (in plain English)

Hive Five #59: Stay curious →

Jack Cable Talks About His Background, Bug Bounty Methodology, and Hacking the US Government

Hive Five #59: Stay curious →

UnChained- Blockchain Security Conference 2022

Hive Five #59: Stay curious →

Reverse Engineering 101 - Intro to Ghidra on Linux by Reversing 5 crackmes

Hive Five #58: Eyes on the future →

Bounty Thursdays (ft Jason Haddix & the twitter spaces squad)

Hive Five #58: Eyes on the future →

100 hours of bug bounty on a public Hackerone program - Bounty vlog #1 Stripe

Hive Five #57: Saved You One Click →

Sudo Exploit for Ubuntu 20.04 LTS

Hive Five #57: Saved You One Click →

How I hacked a hardware crypto wallet and recovered $2 million

Hive Five #56: When Hip-Hop Was Young →

Escalating Your Bugs With GDPR Impact

Hive Five #55: Nightingale →

How to do Code Review - The Offensive Security Way

Hive Five #54: Calling Bullshit →

DON'T call yourself a hacker...

Hive Five #54: Calling Bullshit →

Open-Source Intelligence in 5 Hours

Hive Five #53: Can't Hurt Me →

SSRF - Lab #7 Blind SSRF with Shellshock exploitation

Hive Five #53: Can't Hurt Me →

The Breach They Kept Secret

Hive Five #52: Tools & Craft →

Cyber Santa is Coming to Town - Hacking Party

Hive Five #49: Cyber Santa & Giveaways →

Hackers vs. Developers // CVE-2021-44228 Log4Shell

Hive Five #49: Cyber Santa & Giveaways →

CISA Director Jen Easterly's Keynote at Black Hat USA 2021

Hive Five #48: Duplicates →

Why do you Duplicate so much with Bug Bounties?

Hive Five #48: Duplicates →

$16k Stealing secrets.yaml from GitLab using stored XSS - Hackerone bug bounty

Hive Five #46: Melliferous →

How to clean install macOS Big Sur and configure operating system for privacy

Hive Five #45: The Alchemist →

David reacting to himself finding an SSRF vulnerability in Google Cloud

Hive Five #45: The Alchemist →

Advice for young hackers. Getting started in cybersecurity

Hive Five #44: Hyper scheduling →

We Know Which Private Keys Are Bad

Hive Five #44: Hyper scheduling →

Texas Cyber 2021 videos

Hive Five #42: Man's search for meaning →

Introduction to Bash Programming

Hive Five #40: Extreme Ownership →

Fabio Viggiani & Fredrik Alexandersson - Gone in 45 min, War stories from Incident Response

Hive Five #40: Extreme Ownership →

How to Create a Better Infosec Resume (with jhaddix)

Hive Five #38: The Art of Not Giving a F*ck →

$50,000 Shopify access to source code via leaking GitHub token - Hackerone bug bounty

Hive Five #37: Make it rain →

We Can Find Them

Hive Five #36: Eat the frog →

How to learn anything in Computer Science or Cybersecurity | Security Simplified

Hive Five #35: Just do it →

AutoRecon v2 (Introduction + Plugin Development)

Hive Five #33: Live life →

How does cryptography ACTUALLY work?

Hive Five #33: Live life →

Common Open Redirection Bug Bounty Mistakes by codingo

Hive Five #32: Introductions and infographics →

How to Use WPScan With ethicalhack3r

Hive Five #31: DEFCON and friends →

A Look Into zseano's Thoughts When Testing a Target

Hive Five #30: The Beekeeper's Bible →

$25,000 Stealing GitHub API token with a malicious pull request

Hive Five #30: The Beekeeper's Bible →

Should you do Bug Bounties for a Living?

Hive Five #29: The last dance →

July Lightning Event Featuring Ben Sadeghipour

Hive Five #28: Hunt for jobs like a hacker →

They are all Injection Vulnerabilities! - Security Simplified

Hive Five #27: Recon master, ransomwhere, and AWS →

Interview with base_64 (19 y/o) | ~7000 rep on hackerone | methodology, mindset, life & more...

Hive Five #27: Recon master, ransomwhere, and AWS →

Live Recon on Rockstar Games With zseano

Hive Five #26: DOM XSS, voicemail ATO, and 10K4ILF →

Live GitLab Ask a Hacker with Bug Bounty Hunter (vakzz) William Bowling (Public)

Hive Five #24: Heroes, good vibes, and cache money →

codingo_ Shares His Recon Approach Using SecurityTrails, FDNS, Whoxy and more!

Hive Five #24: Heroes, good vibes, and cache money →

How to Analyze Code for Vulnerabilities

Hive Five #23: Grateful, curious, and cautious →

How to manage projects, tasks, people, and yourself using the Obsidian app with Francisco Bricio

Hive Five #22: Meritocracy, Methodology, and Managing →

Hacker Culture Meritocracy?

Hive Five #22: Meritocracy, Methodology, and Managing →

NorthSec 2021, Ange Albertini - You are not an idiot talk

Hive Five #21: Marriage, Systems, and Milestones →

Inside Security S01E11 | Most Threat Actors suck!

Hive Five #20: Low Hanging Fruit and Peaches →

Hack Chat // Eva Galperin // Hunting Bad Actors and Eradicating Stalkerware

Hive Five #19: Be Stubborn, Invitations, and How to Create Luck →

CRLF + XSS + cache poisoning = Access to Github private pages for $35k bounty

Hive Five #18: Spring, Bugs, and the Crowd →

DEFCON 17: Failure

Hive Five #18: Spring, Bugs, and the Crowd →

USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?

Hive Five #18: Spring, Bugs, and the Crowd →

API Recon with Kiterunner - Hacker Toolbox

Hive Five #15: Protect Linux server from hackers, the power of being a misfit, and bee facts →

Protect Linux Server From Hackers

Hive Five #15: Protect Linux server from hackers, the power of being a misfit, and bee facts →

Fundamentals of Bug Bounty Recon

Hive Five #15: Protect Linux server from hackers, the power of being a misfit, and bee facts →

SHELLCON 2017 Pages from a sword-maker’s notebook Vyrus

Hive Five #15: Protect Linux server from hackers, the power of being a misfit, and bee facts →

Why Isn't Functional Programming the Norm? – Richard Feldman

Hive Five #13: “Life is what happens to us while we are making other plans.” ― Allen Saunders →

DAY[0] Episode 70 - Google exposes an APT campaign, PHP owned, and Several Auth Issues

Hive Five #13: “Life is what happens to us while we are making other plans.” ― Allen Saunders →

Security YouTuber Drama...

Hive Five #13: “Life is what happens to us while we are making other plans.” ― Allen Saunders →

States and Nomads: Handling Software Complexity - Forward 3 Web Summit

Hive Five #13: “Life is what happens to us while we are making other plans.” ― Allen Saunders →

Chapter 1 Security Fundamentals - Alice and Bob Learn Application Security

Hive Five #12: “In three words I can sum up everything I've learned about life: it goes on.” ― Robert Frost →

TomNomNom talk about Networking Fundamentals

Hive Five #12: “In three words I can sum up everything I've learned about life: it goes on.” ― Robert Frost →

Katie Paxton-Fear - Lucky Socks for Bug Bounties

Hive Five #11: “The greatest enemy of knowledge is not ignorance, it is the illusion of knowledge.” — Stephen Hawking →

How I Passed the CompTIA A+ 1001 Core 1 Exam | 10 Tips | Kali Reanna

Hive Five #10: “If you want to go quickly, go alone. If you want to go far, go together.” — Proverb →

Black Hat 2020 Talks

Hive Five #8: “Do what you can, with what you have, where you are.” ― Theodore Roosevelt →

Android Pentesting

Hive Five #5: "We become what we behold. We shape our tools, and thereafter our tools shape us." ― Marshall McLuhan →

From Bug Bounty to Big Bounty - Lucas Philippe

Hive Five #5: "We become what we behold. We shape our tools, and thereafter our tools shape us." ― Marshall McLuhan →

That's all 434

Get the next batch before it lands here.

Every video in this feed started in Hive Five. Join 4,300+ security practitioners, builders, and curious minds who get it first.

/ Hive Five Watch