PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to use Bug Bounties to Build Your Career – Bug Bounty Hunter Methodology

bugcrowd.com | blog | #bug-bounty | #bugcrowd | #methodology | #career | #researchers | #professional-development
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's bug bounty hunter methodology series explains turning bounty work into a career: communicate professionally, get permission before publishing, and cite verified bugs in resumes.
Published
Collected

Related coverage

blog · netspi.com
5 Essential Cybersecurity Leadership Tips for Technologists
NetSPI's Sam Horvath recounts his path from penetration tester to strategist, offering five career tips: embrace challenges, stay adaptable, seek mentorship, and build both hard and soft skills.
blog · semperis.com
Active Directory Experts Have a Future in Security
Career perspective on AD professionals moving into security: cloud adoption and evolving threats expanded their remit to cloud integration and secure access; leveling up identity and security skills is key as attackers exploit AD misconfigurations.
research · slcyber.io
Hacking on Bug Bounties for Four Years
Four years of bug bounty hunting: lessons, techniques, tooling evolution, and notable findings from 2016 to 2020.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
Back