Blog
Notes, research write-ups and longer pieces on bug bounty hunting, vulnerability research, application security and software engineering. Everything here is published after disclosure, or with the permission of the programme that received the report.
Hack the Hague 2026
Hack the Hague 2026: a bug hunting experience covering reconnaissance, source code analysis, WordPress security research, and adapting my approach throughout the day.
CVE-2025-8083 - Prototype Pollution in Vuetify
Back in July of 2025 I found an interesting vulnerability in Vuetify's Preset configuration. In this article I give a technical overview of this bug, following the style of my original report.
Reflecting on 2025 and setting bug bounty goals for 2026
Just like last year, this is a reflection on my bug bounty journey with insights from the Critical Thinking podcast and my article from previous year.
My experience in the HackerOne Ambassador World Cup 2024
A recap of my experience representing the Netherlands in the 2024 HackerOne Ambassador World Cup, from virtual qualifiers to in-person finals in Dubai, with highlights, stats, and reflections.
Reflecting on 2024 and setting bug bounty goals for 2025
Reflection on my bug bounty journey with insights from the Critical Thinking podcast's 'Bug Bounty Hunter Year Review' template. Discovering progress, setting achievable goals, and embracing growth in 2025!
Picking a target for Bug Bounty Hunting: A guide for steady progress
Discover how to achieve steady progress in bug bounty hunting with practical tips on selecting programs, integrating learning, and managing time effectively. Enhance your skills in cybersecurity and vulnerability research with persistence and strategic fo
YouGina
Software engineer and security researcher. I write about bug bounty hunting, application security, and the craft of building software that is harder to break.
Get in touch
@yougina
For research questions, disclosure conversations, or a second opinion on something you are working through.