Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘There are a lot of vulnerabilities on public programs’: pwnii’s Bug Bounty journey so far

yeswehack.com | blog | #bug-bounty | #burp-suite | #mobile-security | #community | #idor | #interview

Summary

Q&A with YesWeHack hunter pwnii (ranked 49th): entering Bug Bounty via CTFs, her favourite mobile IDOR account-takeover find, tools like Burp Suite with PwnFox, and tips for newcomers.
Published
Collected

original ↗

Related coverage

  1. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  2. YesWeHack joins G-Cloud framework for UK public-sector procurement after clearing rigorous evaluation (yeswehack.com)
  3. How to use Codex for Bug Bounty research: explore broadly, validate rigorously (yeswehack.com)
  4. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  5. ‘One challenging thing about Bug Bounty is when it’s black box’: sunshinefactory on bug hunting, CTFs and hardware hacking (yeswehack.com)
  6. Building an Android Bug Bounty lab: the ultimate guide to configuring emulators, real devices, proxies and other mobile hacking tools (featuring Magisk, Burp, Frida) (yeswehack.com)

back