How to Differentiate Yourself as a Bug Bounty Hunter

How to Differentiate Yourself as a Bug Bounty Hunter - Mathias Karlsson @avlidienbrunn

Рет қаралды 33,585

5 жыл бұрын

There are a lot of illusions and misconceptions around the bug bounty industry. Is it too late to join? Are all the vulnerabilities already found? Is everything automated nowadays so there's no way to be late to the party?
Frans and Mathias have been in the mythical world of bounties for a few years and will share their thoughts and ideas on how to actually approach it technically, methodologically and mentally. And also, how to use bug bounties for your own advantage, to improve your career and to increase your pentesting and vulnerability hunting skills.
OWASP Stockholm:
www.owasp.org/index.php/Stock...
Mathias Karlsson:
/ avlidienbrunn

Пікірлер: 13

@andreslauga 3 жыл бұрын

Great! This helped me a lot! Thanks Mathias :)

@Gray3ther 3 ай бұрын

Was that Gollum in his incognito voice near the end of the Q&A? Good to hear he's out of his cave! 😂 Great talk. Awesome guy!

@jxkz3 3 ай бұрын

Great videos

@yodapaw9750 5 жыл бұрын

it should be " Bugs found / ( risk of duplicate * time taken) = BBE" @2:44

@h4kster182 5 жыл бұрын

What about : ( bugs found * probability of not duplicate ) / time taken 🤷🏽‍♂️

@leisureclub_ 5 жыл бұрын

Assetnote has been removed from the official source.. Is there anyone who have link ? Thanks..

@benjaminmcewan6753 5 жыл бұрын

Www.github.com/benmcewan1 but couldn't get it working since the dependencies based ON flask updated. If you get it working let me know

@benjaminmcewan6753 5 жыл бұрын

There's other tools I've yet to look at eg sublert I think is one. Let me know how you get on

@DavidPerez-dt9nb 4 жыл бұрын

But somehow experience should be considered against time taken, since time taken by someone like me who is a total noob cant be compared to the time taken for more experienced bounty hunters

@ashminniraula1193 3 жыл бұрын

I hope you're good at it by now

@ronnyj4179 4 жыл бұрын

0 days? lol thats not "oh". it's zero days.

@abdurrafeh6000 2 жыл бұрын

It’s pronounced both ways. I’ve heard Jason Haddix pronounce it like him.

@lmfao69420 9 ай бұрын

If you're reading out a number (such as a phone number or zip code), it's common to read out the "0" as an oh. So I don't think it seems too weird to pronounce zero day as "oh" day.