At Ekoparty Security Conference zseano had a talk “Staying sane in bug bounties” in which he gave some tips on doing bug bounties and dealing with difficulties that you will sooner or later encounter. Here are my notes from the talk. Issues you may face Some of the...
Bug Bounty
120 days of hunting
I appreciate any blogpost that gives us information not only about bugs and bounties but also about time spent. It gives us the context and understanding of whether reports are one-off lucky findings or vulnerabilities that the hunter can find regularly. Kuldeep...
Approaching small scope programs
I saw a few people on Twitter appreciating videos by GodFather Orwa about bug bounties. So I decided to take a look at the video about approaching small scope programs and I see a lot of potential in this methodology. Of course, I also created notes for you. Here they...
How much bounties Google paid in 2021?
Google has published the review of 2021 on its security blog. You can read how much bounties they paid out in the past year and what were the trends. The good news for us is that bug bounty keeps growing and Google’s payouts in 2021 were significantly higher than in...
Reading RFCs for bug bounty hunters
RFCs are great documents when you are looking for ideas for research or for bugs. But how to read those long documents without bolds and images? EdOverflow created a blogpost about them and how we, bug hunters, can use them for our purposes. It’s a great one and tells...
What it takes to be good at bug bounty hunting – DefCamp 2021
Robert Vulpe had a really good talk on DefCamp 2021 titled “What it takes to be good at bug bounty hunting”. Sometimes, such talks don’t have much content inside but in this case, there are loads of practical tips. Here are my notes from the talk. Reasons to do bug...