PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

non-technical bugbounty tips

josephthacker.com | blog | #bug-bounty | #methodology | #tips
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Joseph Thacker's non-technical bug bounty tips: write verbose and clear reports, be assertive but respectful when a valid bug is closed in error, and default to sharing stuck findings with 2-3 peers instead of giving up.
Published
Collected

Related coverage

blog · josephthacker.com
Simple Parenting Hacks: Tips and Scripts from a Hacker Dad
A bug bounty hunter applies his optimization mindset to parenting three kids, sharing principles like telling dysregulation from disobedience and word-for-word scripts for common situations.
blog · josephthacker.com
ffuf filters
Joseph Thacker clarifies his viral ffuf false-positive tweet: why -mc all -ac catches most noise, which status codes (302, 400, 404, 429, 5xx) are usually junk but occasionally lead to bugs, and when to slow down or dig deeper.
blog · josephthacker.com
cut: command-line tools #2
Part 2 of Joseph Thacker's command-line series: using cut with -d/-f to slice ffuf CSV output, plus a rev|cut|rev trick to strip path suffixes or top-level domains from URL lists.
blog · josephthacker.com
grep: command-line tools #1
Part 1 of Joseph Thacker's command-line series: grep for bug hunters — the -Hrnia flag combo ("hernia"), regex context windows for minified JavaScript, and using grep as a filter for tool output.
blog · josephthacker.com
Passwords are keys. Don't use 1 key for everything.
A beginner-friendly guide to password hygiene: use different, long (12+ characters) and memorable sentence-style passwords across sites, and manage them with a password manager plus a paper backup.
blog · portswigger.net
20 Burp Suite tips from the Burp user community
Curated from @codingo_'s community Twitter thread, 20 practical Burp Suite tips covering hotkeys, default project options files, Repeater workflow tweaks and custom Intruder payload setups.
Back