Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities

portswigger.net | research | #bug-bounty | #interview | #workflow | #hackerone | #burp-suite-professional | #js-miner

Summary

Full-time bug bounty hunter Arman S. (Tess) explains how pairing Burp Suite Professional with HackerOne, plus extensions like JS Miner, helps him find and report high-value vulnerabilities.
Published
Collected

original ↗

Related coverage

  1. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  2. Access Denied (hackerone.com)
  3. Responsible denial of service with web cache poisoning (portswigger.net)
  4. New Security Inbox & Dashboard (hackerone.com)
  5. Watching Agents Work: A Behavioral Audit of Offensive-Security LLM Runs (projectdiscovery.io)
  6. Beyond Prompt Injection: Hacking Apple's Private Cloud Compute (blog.sentry.security)

back