PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘The most challenging part is the psychological one’ – leorac on the ups and downs of Bug Bounty hunting

yeswehack.com | blog | #bug-bounty | #interview | #mindset | #motivation | #leorac | #romhack
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Interview with Italian hunter leorac on the psychological challenge of bug bounty, staying motivated through ups and downs, favoured bug types and tips for beginners.
Published
Collected

Related coverage

blog · josephthacker.com
Self Alignment: How to Know What To Do
A practical framework for self-alignment: happiness depends on longevity, perception, and circumstances, each requiring knowing how, wanting to, and actually doing the work.
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
‘One challenging thing about Bug Bounty is when it’s black box’: sunshinefactory on bug hunting, CTFs and hardware hacking
YesWeHack interviews sunshinefactory (Yuewei Wu), part of the winning team at the SPIRITCYBER hardware contest, on IoT hacking methodology, CTF versus bug bounty, and career advice.
blog · yeswehack.com
‘Bug Bounty has become a security best practice’: Why Ferrero is sweet on crowdsourced testing
Ferrero's security team on its bug bounty journey: scaling to ~130 hunters, handling report spikes, hosting Italy's first live hacking event, and treating crowdsourced testing as best practice.
Back