EPISODE · Apr 29, 2026 · 45 MIN
From Gamer to Bug Bounty Hunter with Dylan Lawhon
from Chat with a White Hat · host Michel Chamberland
Dylan Lawhon (aka iQimps) shares his journey from gaming to bug bounty hunting, including real-world hacking stories, zero-day discovery, SAML abuse, and advice for breaking into cybersecurity in 2026.00:00 – 00:25 Intro & background00:25 – 01:44 Getting into computers (gaming era)01:44 – 03:44 First cybersecurity interest (game hacking & PSN breach)03:44 – 08:30 Early hacking mindset & CTFs08:30 – 13:44 First major live hacking event (bug bounty experience)13:44 – 19:12 CSS injection → SSRF → account takeover case study19:12 – 23:54 Favorite type of security testing (code review)23:54 – 27:22 Bug bounty vs pentest time management27:22 – 30:32 Improving vulnerability impact communication30:32 – 33:41 Using AI in cybersecurity & automation33:41 – 38:52 Future of AI in offensive & defensive security38:52 – 45:48 Underestimated attack vector (SAML abuse)45:48 – 48:48 Breaking into cybersecurity advice (2026)48:48 – 51:11 SQL injection + documentation mindset51:11 – 52:10 Where to find Dylan + closingWhether you're a beginner in cybersecurity, a bug bounty hunter, or a seasoned pentester, this episode is packed with real-world insights from the front lines of offensive security.
What this episode covers
Dylan Lawhon (aka iQimps) shares his journey from gaming to bug bounty hunting, including real-world hacking stories, zero-day discovery, SAML abuse, and advice for breaking into cybersecurity in 2026.00:00 – 00:25 Intro & background00:25 – 01:44 Getting into computers (gaming era)01:44 – 03:44 First cybersecurity interest (game hacking & PSN breach)03:44 – 08:30 Early hacking mindset & CTFs08:30 – 13:44 First major live hacking event (bug bounty experience)13:44 – 19:12 CSS injection → SSRF → account takeover case study19:12 – 23:54 Favorite type of security testing (code review)23:54 – 27:22 Bug bounty vs pentest time management27:22 – 30:32 Improving vulnerability impact communication30:32 – 33:41 Using AI in cybersecurity & automation33:41 – 38:52 Future of AI in offensive & defensive security38:52 – 45:48 Underestimated attack vector (SAML abuse)45:48 – 48:48 Breaking into cybersecurity advice (2026)48:48 – 51:11 SQL injection + documentation mindset51:11 – 52:10 Where to find Dylan + closingWhether you're a beginner in cybersecurity, a bug bounty hunter, or a seasoned pentester, this episode is packed with real-world insights from the front lines of offensive security.
NOW PLAYING
From Gamer to Bug Bounty Hunter with Dylan Lawhon
No transcript for this episode yet
Similar Episodes
Mar 26, 2026 ·1m
Jan 2, 2026 ·47m
Dec 21, 2025 ·46m