https://newo-j.github.io/tags/tooling/ Recent content in Tooling on Jonah Owen Hugo en-gb Tue, 12 May 2026 00:00:00 +0000 https://newo-j.github.io/projects/diffing-engine/ Tue, 12 May 2026 00:00:00 +0000 https://newo-j.github.io/projects/diffing-engine/ <figure class="fig" style="--fw:120%"> <img src="https://newo-j.github.io/images/diffy.png" alt="AirGap-Diffy" width="1920" height="1080" loading="eager" decoding="async"> </figure> <p>During my time at Synack Red Team, the scope of real-world penetration tests initially felt overwhelming to me. Us researchers would often be assigned massive scopes of data to audit that is unlike anything seen in a lab environment such as HackTheBox.</p> <p>Fellow SRT&rsquo;ers suggested I pick a vulnerability class, and get good at it - I found myself doing well with Access Control / IDOR vulnerabilites and ended up landing my first critical (CVSS 9.1) bug bounty that way.</p>