---
id: 237
title: "How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/how-this-seasoned-bug-bounty-hunter-combines-burp-suite-and-hackerone-to-uncover-high-impact-vulnerabilities"
published_at: "2025-09-12 12:21"
tags: ["bug-bounty", "interview", "workflow", "hackerone", "burp-suite-professional", "js-miner"]
phying_url: "https://phying.com/item/237"
lang: en
---

# How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities

## Summary

Full-time bug bounty hunter Arman S. (Tess) explains how pairing Burp Suite Professional with HackerOne, plus extensions like JS Miner, helps him find and report high-value vulnerabilities.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-09-12 12:21
- **Original:** https://portswigger.net/blog/how-this-seasoned-bug-bounty-hunter-combines-burp-suite-and-hackerone-to-uncover-high-impact-vulnerabilities
- **Phying News:** https://phying.com/item/237