Gunnar Andrews @G0LDEN_infosec Twitter profile

Pinned Tweet

Gunnar Andrews

@G0LDEN_infosec

10 months

Say less I'm in! Follow me on threads 🙏

1

0

23

Last Seen Profiles

@maymeeharu

@AlsayyadKr48294

@maxiikits

@RogerKerry1

@HeyTomAbell

@LW_Athletics

@KanakaresK55708

@ZeybekciNihat

@KhalilJeries

@RiseSoftball

@sugsug_soran

@Ziggssss

@yarpolyanitsa

@KYGSA

@EDIH_HDF

@hikighg

@NCAACasteelHS

@Cuty_Caballero

@Firststarlog

@SBRReview

@SorenLuka

@kurage_news

@SoYeah_Furry

@SIMCFC

@Shimza01

@N24an

@Xavier60636713

@CarllyleHubbar2

@takizawa0914

@_Namrataa

@gaycowboyjesus

@celeam_latam

@redbrick_t

@Lp5835669420183

@Pierce_Brown

@McAnespie1

Gunnar Andrews

@G0LDEN_infosec

2 years

Nothing cooler than seeing @Jhaddix present at DEFCON! Just as cool of a human as you would expect in person! 🤘🔥

4

3

210

Gunnar Andrews

@G0LDEN_infosec

5 months

Howdy! Just put out a new video about just how easy it is to set up some very easy automation to get anyone and everyone going :) Check it out!

The Beginner's Guide to Automating Your Bug Bounty Workflow

This video demystifies automation in bug hunting, presenting practical, straightforward examples to streamline your workflow. Whether you're just starting or...

www.youtube.com

1

54

187

Gunnar Andrews

@G0LDEN_infosec

1 year

I feel like JS analysis is such a big part of successful bug bounty hunting today. But it's hard to find specific methodologies for it 🤔

7

15

110

Gunnar Andrews

@G0LDEN_infosec

1 year

Check out the newest blog that got published if you are trying to enhance your subdomain enumeration 🤓

Subdomain reconnaissance: enhancing a hacker's EASM - Labs Detectify

This blog provides a few advanced subdomain reconnaissance techniques to enhance an ethical hacker’s EASM techniques.

labs.detectify.com

4

37

103

Gunnar Andrews

@G0LDEN_infosec

1 year

Like many in the BB scene, I am a HUGE fan of @Jhaddix 's Bug Bounty Methodology. But I was always more of a notion fan over Xmind. So this video is how I track my work and take notes during bug bounty hunting using Jason's amazing methods! Check it out!

How I organize information and take notes | Bug Bounty

This video shows my template in notion for taking notes and handling data while I am doing my manual hunting. I hope you enjoy it!I created this after studyi...

www.youtube.com

4

25

99

Gunnar Andrews

@G0LDEN_infosec

3 months

New video! I wanted to make a video going over some recon techniques that people can use to essentially snapshot the internet, and monitor for assets. I talk about what you could use your compute for instead of JUST brute forcing! Check it out!

1

19

96

Gunnar Andrews

@G0LDEN_infosec

9 months

I spoke twice at @ReconVillage ! Those talks are LIVE on YouTube! Check them out How I Built Recon to Scale with Serverless Architecture: Easy EASM The Zero-Dollar Attack Surface Management Tool (w/ @Jhaddix & @OliviaGalluccii ):

2

21

91

Gunnar Andrews

@G0LDEN_infosec

2 years

Another amazing hacker I met at DEFCON! @InsiderPhD is so fricken nice in person, and thank you so much for the chat/tips 🤘

1

3

90

Gunnar Andrews

@G0LDEN_infosec

4 months

In true new years fashion.... How to DOMINATE bug bounties in 2024 :) My thoughts and opinions on how you can grow and dominate this year. Check it out :) Sorry sickness delayed this one a ton!

Dominating Bug Bounties in 2024!

Following in true content creator form, we gotta make a video about DOMINATING BUG BOUNTIES in 2024! This is a video of my opinions of what it takes to make ...

www.youtube.com

0

11

87

Gunnar Andrews

@G0LDEN_infosec

1 year

Hey everyone! I updated my BB automation architecture, and I wanted to share my thoughts. This video goes into my changes, and why I made them. Check it out :)

I updated my bug bounty automation! (Automation Series)

Hey everyone! This video explains some of the changes I have made to my bug bounty architecture. I am sharing my experience here, and I hope this brings you ...

www.youtube.com

0

16

80

Gunnar Andrews

@G0LDEN_infosec

2 years

This new video goes over how I do subdomain recon in my automation. This is a high level overview of how I do things :) I left active enumeration/permutations for another video! Let me know what y'all think! 🤓

How I Automate My Subdomain Recon! (Automation Series)

This video goes over how I start my subdomain enumeration in my automation. I saved the active enumeration and permutation for another video, but this covers...

www.youtube.com

2

25

77

Gunnar Andrews

@G0LDEN_infosec

10 months

SUPER excited to share at @ReconVillage how I built my recon framework in the serverless landscape ! If you're around at DEFCON come check out my talk 🤘

5

7

74

Gunnar Andrews

@G0LDEN_infosec

5 months

If you are into cyber security, bug bounty, red teaming, etc. You should be checking out @Jhaddix 's discord: And you should also 100% be involved in the @ctbbpodcast discord channel: These two channels are necessity IMO 🤘

2

18

76

Gunnar Andrews

@G0LDEN_infosec

1 year

2.5 million subdomains found 🤓

6

2

73

Gunnar Andrews

@G0LDEN_infosec

6 months

New video time! This one goes over how I setup a full ready to go Kubernetes cluster on my home lab servers! If you are trying to run Kubernetes locally to develop cool stuff, check it out! :)

How I Deployed Kubernetes In My Home Lab!

In this video I will walk through how I set up a full Kubernetes cluster using k3s in my own lab environment! I hope you enjoy!Techno Tim's YT channel: @Tech...

www.youtube.com

0

17

75

Gunnar Andrews

@G0LDEN_infosec

2 months

Finally dropped my new tool! Gungnir is a continuous CT log scanner that prints out domains to stdout! Check it out!

3

19

74

Gunnar Andrews

@G0LDEN_infosec

6 months

If you didn't notice, my dude @xnl_h4ck3r made another AMAZING tool! It is a browser extension that does a ton of amazing things that were mentioned in the newest @ctbbpodcast episode! I made a short video so you can see why it's awesome! check it out :)

New Tool Alert!!! XnlReveal by xnl-h4ck3r

Short video showing off the newest tool from a friend of mine xnl-h4ck3r! Super excited to use this tool while I am hacking, and please PLEASE check out the ...

www.youtube.com

1

13

69

Gunnar Andrews

@G0LDEN_infosec

6 months

Anyone who watched my first homelab video be ready for the next one. I have some kubernetes clusters set up with some cool stuff going on! And it is all automated thanks to ansible :)

1

2

66

Gunnar Andrews

@G0LDEN_infosec

1 year

Hey everyone :) I wrote a blog introducing @pdiscoveryio 's new crawler tool Katana! Check it out and try the tool out for yourself! P.S. : A lot of you know I write my automation in Go. Well Katana can also be used as a Go library now as well :)

Introducing Katana: The CLI web crawler from PD

What is Katana? Katana is a command-line interface (CLI) web crawling tool written in Golang. It is designed to crawl websites to gather information and endpoints. One of the defining features of...

blog.projectdiscovery.io

0

16

64

Gunnar Andrews

@G0LDEN_infosec

2 years

Stopped by the ASM panel @ReconVillage this morning with @NahamSec , @Jhaddix , and @jeff_foley ! Of course if there isn't a picture it didn't happen🤷‍♂️ It has been so fun meeting all these amazing hackers in person 🔥

0

3

66

Gunnar Andrews

@G0LDEN_infosec

4 months

We broke 3k YT subscribers... And I fricken love all 3062 of you ❤️ it means the world to me

6

2

62

Gunnar Andrews

@G0LDEN_infosec

2 years

I want to make a community of bug bounty hunters that support each other and hack the planet together :)

9

0

58

Gunnar Andrews

@G0LDEN_infosec

10 months

Hey everyone! I made a little curation of the blogs/resources I am using to "study" bug bounty! I made a repo for it and here is a video explaining why I think you should check it out :)

Learning Bug Bounty with Disclosed Reports and Blogs! Where to go!

Hi! This is just a short video on where I go to read/study disclosed bug bounty reports. As well as the blogs from other BIG researchers in the space that I ...

www.youtube.com

2

14

57

Gunnar Andrews

@G0LDEN_infosec

1 year

Hello! So as some of you have seen I went down a little Web3 rabbit hole. I made a video compiling all the recommended resources to get started if Web3 bug bounties are something you are interested in exploring! Check it out :)

How I am learning Web3! (Smart Contracts, Security, Bug Bounty)

This is a "short" video on how I am approaching learning Web3 development and security! There doesn't seem to be that many compiled lists of resources for ge...

www.youtube.com

2

16

56

Gunnar Andrews

@G0LDEN_infosec

3 months

I appreciate every single one of you who have decided to hit the sub button ❤️ having my own little community has been so much fun!

9

0

57

Gunnar Andrews

@G0LDEN_infosec

2 years

Chill Bug Bounty automation/coding stream! Come hangout and chat :)

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

0

12

55

Gunnar Andrews

@G0LDEN_infosec

2 months

I seriously never thought it was possible. But it happened! 🔥 Everyone who has come to the streams to hang out, I love each and every one of you!

11

2

53

Gunnar Andrews

@G0LDEN_infosec

1 year

Golang bug bounty automation. Come hang!

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

4

12

50

Gunnar Andrews

@G0LDEN_infosec

2 years

Just put out a new video on PwnFox and how it can be such an easy tool for finding critical bugs! This is the first hands on exploitation video! Huge thanks to @zseano for letting me use the platform!

Gamified Hacking Ep:7 | How Hunting Broken Access Control Can Be...

Hello again! This is the first video where we FINALLY start some real exploitation. I wanted to start with the least technical bugs in my opinion and work up...

www.youtube.com

3

18

47

Gunnar Andrews

@G0LDEN_infosec

3 months

This is the type of stuff that makes current AND future creators tentative to share their tools, videos, content, etc. This is extremely disheartening to see coming out of our community tbh.

I need a break...

The endless stream of demands and harassment around my Bug Bounty Hunting Framework has finally gotten to me, so I've decided to take a break from developing...

www.youtube.com

6

4

49

Gunnar Andrews

@G0LDEN_infosec

9 months

Just dudes being hackers @Jhaddix 🤷‍♂️👨‍💻 Picture cred: @OliviaGalluccii

2

48

Gunnar Andrews

@G0LDEN_infosec

1 year

Whoever shouted out my YouTube channel on @NahamSec 's stream today, you're the real ones ♥️ Watching him check out the channel was so cool! I really appreciate the people recommending my channel to folks.

3

0

46

Gunnar Andrews

@G0LDEN_infosec

16 days

New video! This one shows how the @Jhaddix discord helped me tune CloudRecon, and how I use it to scrape certificates across all IPv4 IPs!

0

6

48

Gunnar Andrews

@G0LDEN_infosec

2 months

Portswigger and Javascript :) hacker hangout!

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

2

8

47

Gunnar Andrews

@G0LDEN_infosec

1 year

Okay FINALLY against all odds the new video is out! This one talks about the hacker's mindset, and why it is so important for beginners! Check it out! P.S.: There is a little something for the discord I talk about at the end. Check that out too!

The Hacker's Mindset for Beginners

In this video, I talk about how the hacker's mindset that everyone talks about can be utilized by beginners in the scene. I talk about the mindset itself, as...

www.youtube.com

2

9

45

Gunnar Andrews

@G0LDEN_infosec

2 years

I think I am going to start posting youtube videos focused around my own automation / manual hacking experiences. So the topics may be more random but hopefully that will help me post more often :)

0

3

45

Gunnar Andrews

@G0LDEN_infosec

1 year

Hey everyone! The newest video is out! This one is about how SPECIFICALLY I believe you can improve as a bug bounty hunter. Beyond the generic "practice more / do more ctfs" :) Check it out and let me know what you think!

BEYOND CTFS & LABS! My take on improving in bug bounty hunting

This video gives my take on how to continue to improve in bug bounties! Everyone gives the same advice to go back and do more labs, so hopefully this is a di...

www.youtube.com

0

13

42

Gunnar Andrews

@G0LDEN_infosec

1 year

Okay so does this mean you get the pentest the ice cream machine... because those things are always offline...

2

5

40

Gunnar Andrews

@G0LDEN_infosec

2 months

I'm hearing so many people say JavaScript and understanding/using js to your advantage is a top notch BB skill right now. But the "info" seems to still be scattered. Anyone want to name drop folks that have contributed to this so I can take a peek and start a list? :)

7

5

41

Gunnar Andrews

@G0LDEN_infosec

4 months

Other than the Mozilla docs, does anyone have any other sources (videos, blogs, explanations, etc.) on the following topics?: CSP Site isolation Same Origin Policy Frames Same-Site JavaScript execution methods (script, onevent handlers) PostMessage LocalStorage/SessionStorage

15

5

42

Gunnar Andrews

@G0LDEN_infosec

2 months

Coding recon stuff :)

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

0

7

41

Gunnar Andrews

@G0LDEN_infosec

1 year

After spending time on @zseano 's @BugBountyHunt3r platform, reading @Rhynorater 's newest H1 interview, and reviewing other bb hunter's methodology. I noticed a similarity. APPLICATION ANALYSIS! So I made a video about my thoughts and where to learn more!

Why you should try bug bounty hunting with application analysis!

Hello everyone! This is a shorter video where I wanted to compile some thoughts. Over my time in the industry I have heard multiple very well-known bug bount...

www.youtube.com

0

3

39

Gunnar Andrews

@G0LDEN_infosec

2 months

Has anyone done the Senior Web Pentester (CWEE) stuff on HTB academy yet? If so I would love to hear your thoughts :)

11

3

35

Gunnar Andrews

@G0LDEN_infosec

2 months

There is a lot of "trainings" or "courses" flying around the infosec world atm. But if you ARE in the market for some top tier learning, check out @Jhaddix 's TBHM course. I just listened in for the third time, and it is worth every single cent of the price. Gets better every time

1

2

33

Gunnar Andrews

@G0LDEN_infosec

2 years

Am I the only one checking GitHub daily for @Jhaddix 's new sus_params repo?....

7

0

32

Gunnar Andrews

@G0LDEN_infosec

1 year

Over 1,000 people subscribed... WOW! Everyone who follows along and watches my stuff, I seriously have nothing but love for you all! And all the amazing hackers that have shouted out/shared my stuff. It really means the WORLD to me. Thanks so much 🤓

3

0

33

Gunnar Andrews

@G0LDEN_infosec

2 years

Finally got a new video out! This one talks about my experience with bug bounty automation, and how I am building mine :) I hope you all enjoy it and stick around for the series!

My experience with bug bounty automation (series announcement!)

This video is kicking off a series about how I do bug bounty automation! I am hoping this series can be a cooperative series where I can make videos that peo...

www.youtube.com

0

7

33

Gunnar Andrews

@G0LDEN_infosec

10 months

Hey everyone! As some know, I took @Jhaddix 's TBHM Live course last weekend. Well, I just wanted to slide a unedited video out there about my thoughts, and if this is something you should consider! Check it out :)

0

9

33

Gunnar Andrews

@G0LDEN_infosec

1 year

New video is out! I wanted to go over a few of the different "types" of automation I have seen people use in bug bounties. Let me know what you think!

3 Types of Bug Bounty Automation! (Automation Series)

This video is about the different "types" of bug bounty automation that I have seen. We go over the three different types. As well as the pros and cons of ea...

www.youtube.com

0

9

32

Gunnar Andrews

@G0LDEN_infosec

2 years

If any of my bug bounty friends out there I am looking for help. I believe I have a solid automation pipeline for recon set up. I was curious if anyone that has a running list of domains for a wide-scope program would be willing to compare with me:)

9

0

31

Gunnar Andrews

@G0LDEN_infosec

1 year

bug bounty automation work. Come hang! :)

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

0

4

31

Gunnar Andrews

@G0LDEN_infosec

1 year

Got the new profile picture from @rez0__ ! Thank you so much!

1

31

Gunnar Andrews

@G0LDEN_infosec

2 years

The options for after work on a Friday night: 1. Automation work/coding 2. Get back into leveling up in @BugBountyHunt3r 3. Hack on @SynackRedTeam 🤔🤔

4

1

30

Gunnar Andrews

@G0LDEN_infosec

2 months

The portswigger labs run continues! To GLORY!

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

0

5

31

Gunnar Andrews

@G0LDEN_infosec

2 years

Day 1 of my year of bug bounty: I started my bug bounty year by going hard on the training platform that seems to get HUGE results for learning, and that is @BugBountyHunt3r ! I already had about 13 vulns, but during my work time today I was able to submit 2 more vulns!

2

1

29

Gunnar Andrews

@G0LDEN_infosec

7 months

New video! I got some servers and started a "home lab". I am planning on continuing the tool dev and automation journey here, and hopefully grow it as I go :) Check it out!

I Started A Home Lab! (Automation Update)

Hello again! This video introduces the very beginnings of my "home lab", and gives an update to how I plan to use it to migrate my automation to Kubernetes! ...

www.youtube.com

1

3

30

Gunnar Andrews

@G0LDEN_infosec

1 year

1. Sitting at home in the snow making a website 2. @Bugcrowd sends the private invite 3. Hunter mode => ON Going to be a long night :P

2

1

28

Gunnar Andrews

@G0LDEN_infosec

4 months

Just re-watched on old bounty Thursday's that @stokfredrik used to put on. Man I miss those!

2

1

29

Gunnar Andrews

@G0LDEN_infosec

1 year

As 2022 comes to a close in a week, I just wanted to say a huge thank you everyone I interacted with this year. All the people that chat with me, mentor me, work with me, and much more. I love you all 🙂Here's to 2023 🤘

3

0

28

Gunnar Andrews

@G0LDEN_infosec

1 year

Hey everyone! For anyone thinking of diving head first into bug bounties in 2023, check out my new video where I give some high level advice of stuff I have done as well as share some knowledge other BB hunters have shared with me :)

Starting Bug Bounty in 2023!

This video is for those folks that are gearing up to start their bug bounty journey in 2023! I go over the basics, and some of my recommendations for getting...

www.youtube.com

0

8

28

Gunnar Andrews

@G0LDEN_infosec

8 months

I had a great chat with @CharlieEriksen (Creator of @WeaselJs )! We talked about the process of creating jswzl, bug bounties, automation, and much more :) Check out the video!

Chat w/ Charlie Eriksen, Creator of Jswzl! (Bug Bounty, Cyber,...

Hey everyone! I had a chat with Charlie Eriksen, who created Jswzl (https://www.jswzl.io)We talk all about the tool. Why and how he made it, upcoming plans, ...

www.youtube.com

3

6

27

Gunnar Andrews

@G0LDEN_infosec

1 year

It was super cool watching @NahamSec and @Jhaddix hop back on a stream today. I am super excited for all the live recon streams to start back up 🤘

0

1

28

Gunnar Andrews

@G0LDEN_infosec

1 month

We. Go. Gym 💪 Happy Friday nerds 🤘❤️

7

0

28

Gunnar Andrews

@G0LDEN_infosec

5 months

I attended @Jhaddix 's hacking your brand course today. And I gotta say it honestly was an absolute GAME CHANGER👌

0

1

27

Gunnar Andrews

@G0LDEN_infosec

2 months

Coding tools maybe portswigger! Come hackers!

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

0

3

27

Gunnar Andrews

@G0LDEN_infosec

1 year

A few people asked me to explain how I handle my data and connect to a database with my containerized automation. Well my new video is a demo to explain how I do it and why! Enjoy :)

How I connect my automation to a database! (Automation Series)

This is a short demo video explaining how I use environment variables within my dockerized automation to connect to a central database. This will make the da...

www.youtube.com

1

7

27

Gunnar Andrews

@G0LDEN_infosec

9 months

Final few lifts before @defcon ! 💪💪 #wehackhealth

4

0

26

Gunnar Andrews

@G0LDEN_infosec

1 year

Hey everyone! Put out a small little video on my take staying motivated in bug bounties. I hope you check it out :) sorry for the long wait!

Mental Hacking Ep:3 | Staying Motivated in Bug Bounty

Hey everyone! Just wanted to put in my little sideways take on staying motivated in bug bounty. It isn't your normal motivation, but I think it helps! Let me...

www.youtube.com

1

4

25

Gunnar Andrews

@G0LDEN_infosec

11 months

Toxicity in the bug bounty space just makes me sad. Sadly there are folks that think the fastest way to build themselves up is to just tear others down. Any people who follow me in the scene, please PLEASE be a positive force in the community.

2

1

26

Gunnar Andrews

@G0LDEN_infosec

1 year

It is done! I have decided the best place to show off the new stuff I have been building is at DEFCON! Fingers crossed 🤞

2

25

Gunnar Andrews

@G0LDEN_infosec

8 months

A few weeks ago I spoke to @CharlieEriksen about @WeaselJs !! I just wanted to follow with a little demo going over how easy it is to get going, and what it looks like to run the tool! Check it out :)

Taking your JS analysis to the next level! (JSWZL DEMO)

Following up on our conversation with Charlie, I wanted to put out a demo of the jswzl tool, what it looks like, and why I love using it! Check it out!Charli...

www.youtube.com

0

7

25

Gunnar Andrews

@G0LDEN_infosec

1 year

@TakSec If you like JS link finder as an extension you should try/compare it to @xnl_h4ck3r 's tool!

2

8

23

Gunnar Andrews

@G0LDEN_infosec

2 months

Be advised!! The community already caught some errors in the first version of gungnir! So I made some changes today to fix them all! Please check the readme and download the newest version :)

0

3

25

Gunnar Andrews

@G0LDEN_infosec

9 months

Go watch :) This was such a fun time and thanks for having me!🤘

VAIDIK PANDYA

@h4x0r_fr34k

9 months

Episode 13 of hackcast is out with @G0LDEN_infosec About automation in bug bounty Link:

0

7

1

8

25

Gunnar Andrews

@G0LDEN_infosec

6 days

Yo the dude in that video looks like me 👀

Ben Sadeghipour

@NahamSec

6 days

In Recon: If You're Not First You're Last

2

21

214

2

4

33

Gunnar Andrews

@G0LDEN_infosec

2 years

Just got my OSWA cert! Thanks again @offsectraining !

OffSec Web Assessor (OSWA) • Gunnar James Andrews • OffSec

Home of digital credentials

www.credential.net

2

23

Gunnar Andrews

@G0LDEN_infosec

2 years

First Mental Hacking video is live! These videos will be about mindset, improvement, etc. This first one is all about how to improve in bug bounties, web hacking, or really any skill! Check it out! :)

Mental Hacking Ep:1 | How to Improve in Bug Bounty / Web Security?

Hey everyone! This video is the first in a series I call Mental Hacking. It will be full of videos about mindset, improvement, beating imposter syndrome, etc...

www.youtube.com

4

3

23

Gunnar Andrews

@G0LDEN_infosec

9 months

EVERYONE needs to go read this! @DanielMiessler is speaking so much truth and bringing so much knowledge in this! Check it out!

What I'm Doing and How It's Going

How I went from a $350K FTE to $700K+ doing my own thing

danielmiessler.com

1

24

Gunnar Andrews

@G0LDEN_infosec

2 years

Bug bounty automation and chill O.o

g0lden1_ - Twitch

Ethical Hacking with some gaming on the side :)

www.twitch.tv

0

8

24

Gunnar Andrews

@G0LDEN_infosec

9 months

@christophetd @_sarahyo @Jhaddix

GitHub - g0ldencybersec/CloudRecon

Contribute to g0ldencybersec/CloudRecon development by creating an account on GitHub.

github.com

0

4

23

Gunnar Andrews

@G0LDEN_infosec

7 months

👀👀👀

4

0

23

Gunnar Andrews

@G0LDEN_infosec

1 month

@Jhaddix I am currently doing this :)

Learn VIM while playing a game - VIM Adventures

VIM Adventures is an online game based on VIM's keyboard shortcuts. It's the "Zelda meets text editing" game. So come have some fun and learn some VIM!

vim-adventures.com

0

2

22

Gunnar Andrews

@G0LDEN_infosec

1 year

How does one do true "security research"?? Like is it actually diving into RFCs, white papers, and Google scholar? I am actually genuinely curious/asking

9

1

23

Gunnar Andrews

@G0LDEN_infosec

1 month

It's time!! Got some new looks coming up!

6

1

23

Gunnar Andrews

@G0LDEN_infosec

2 years

Best resources to deep dive DNS for bug hunters and security researchers? 👀

3

5

21

Gunnar Andrews

@G0LDEN_infosec

2 years

Finally episode 4 of Gamified Hacking is out! This one is all about data driven bug bounty. What are some ways of handling all the data you gather, and why data is important! Please check it out and share if you like it :)

Gamified Hacking Ep:4 | Data Driven Bug Bounties!

Episode four is finally here! The past episodes have given us a LOT of data to deal with, and this episode is all about why handling that data and using it t...

www.youtube.com

1

20

Gunnar Andrews

@G0LDEN_infosec

2 months

When I get home I am uploading the vod of yesterday's stream with @xssdoctor for all those who asked :)

2

0

21

Gunnar Andrews

@G0LDEN_infosec

2 months

HUGE shout out to @JXoaT and the @hackthebox_eu crew for giving me the chance the experience the "Senior Web Penetration Tester" Learning path! I can't wait to learn a ton and share my experience 🔥🔥

2

1

21

Gunnar Andrews

@G0LDEN_infosec

6 months

IMO... The perfect combo for bug bounty collaboration: 1. The super exploiter: tons of knowledge, tricks, in-depth knowledge. 2. The security engineer/dev: Able to automate and expand the attack surface and exploitation reach of member #1

1

2

21

Gunnar Andrews

@G0LDEN_infosec

1 year

I have to say I have a "new" weird goal with BB. Seeing all these elite BB hunters that have such close friendships with each other through this field. THAT is what I want. I want to be a part of that ✋

2

0

20

Gunnar Andrews

@G0LDEN_infosec

9 months

Am I a psychopath for really liking the Windows + WSL setup for development and hacking? It has been working so nice so far!

8

1

20

Gunnar Andrews

@G0LDEN_infosec

1 year

I wanted to put out my 2023 "resolutions". This year I will be focusing on 5 things. In true @JamesClear fashion these 5 things are SYSTEMS and not goals. My hope is at the end of the year I can report back on what output these systems produced. The five are the following:

2

1

19

Gunnar Andrews

@G0LDEN_infosec

1 year

Check it out l! 📈

Ben Sadeghipour

@NahamSec

1 year

I made $100,000+ Hacking on @hacker0x01 and @bugcrowd ! 🎥👉🏼

22

49

462

0

3

20

Gunnar Andrews

@G0LDEN_infosec

2 years

New video alert! Gamified hacking episode 1 is out! This one is all about gathering in scope domains without missing any possible attack surface. This could include scopes where all assets are in scope! Check it out and let me know what you think! 🤓

Gamified Hacking Ep:1 | Scope & Gathering Seed Domains!

Here we go! First official episode of the gamified hacking series! This one is all about getting started. This means heading to a bug bounty platform, grabbi...

www.youtube.com

1

6

20

Gunnar Andrews

@G0LDEN_infosec

1 year

New video! This one goes in depth on why I think you should be enumerating/tracking IPs during your recon (ESPECIALLY with automation). Check it out!

Why I enumerate & store IP addresses during recon! (Automation Series)

This video answers a question I have been asked a few times. Why do I enumerate and store target IP addresses along with domains? Well this video gives my an...

www.youtube.com

1

10

19

Gunnar Andrews

@G0LDEN_infosec

1 year

Chill short stream! Coding some BB automation!

1

3

19

Gunnar Andrews

@G0LDEN_infosec

2 months

Look out for us 👀 we are on the come up I swear it 🔥🔥

Roll4Combat

@BadAt_Computers

2 months

@G0LDEN_infosec told me he already started on HTB- CWEE so I guess its my time to level up and go through this material. I absolutely loved the CBBH as it was my first certification and really looking forward to this Senior Penetration Testing Path.

3

0

15

1

19

Gunnar Andrews

@G0LDEN_infosec

1 year

I find myself counting down the days until the next @ctbbpodcast pod🤷‍♂️ if you haven't listened yet and you are in bug bounties, you're missing out BIG! 👊

2

5

19

Gunnar Andrews

@G0LDEN_infosec

2 months

Today's activities: - Gym - Pentest - Stream - Game Perfect Sunday 👌👌

2

1

19