PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

High Agency Hacking

josephthacker.com | blog | #bug-bounty | #community | #methodology | #recon | #report-writing | #high-agency
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Applying George Mack's high-agency idea to bug bounty: ask for more scope, read the docs, push back on low payouts, write high-quality reports, and share leads generously with fellow hackers.
Published
Collected

Related coverage

blog · netlas.io
Bug Bounty 101 - A Complete Bug Bounty Roadmap for Beginners (2026)
A realistic 2026 bug bounty roadmap for beginners: legal scope, prerequisites, target selection, effective recon, web and API bug hunting, and writing reports that actually get paid.
blog · xbow.com
MITRE ATT&CK Coverage Assessment: How to Measure Defensive Readiness
Most ATT&CK coverage heatmaps are built on assertion, not evidence. Here’s the methodology that makes numbers defensible, with the help of autonomous continuous testing.
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · about.gitlab.com
Co-Create: Building GitLab with our users
GitLab's Co-Create recap: in H1 2026, 650+ contributors shipped 4,874 improvements across 100+ product groups — from instance-wide Secret Push Protection to Scala support for Orbit and Duo.
Back