PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘My best attribute is persistence – technical skills you can learn’: drak3hft7’s Bug Bounty story so far

yeswehack.com | blog | #bug-bounty | #idor | #interview | #yeswehack | #soft-skills | #ghauri
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Italian hunter drak3hft7 (Simone Paganessi, 8th on YesWeHack's 2024 leaderboard with 656 reports): soft skills over technical ability, his critical IDOR find, and favourite tools like Ghauri.
Published
Collected

Related coverage

blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
YESWEHACK PROPHILE ON HISXO
A YesWeHack 'Prophile' spotlight from April 2020 on France-based ethical hacker HisXO, covering his path from penetration tester to active bug bounty hunter and his favourite tools.
vulnerability · yeswehack.com
How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEs
Learn how to find IDOR, stored XSS and information disclosure vulnerabilities with practical tips and techniques from YesWeHack’s top-ranked bug hunters.
vulnerability · yeswehack.com
How we help our clients step-by-step in their Bug Bounty journey
Interview with YesWeHack's Head of Customer Success on guiding clients through their bug bounty journey: scoping and launching programs, keeping them attractive to researchers, managing relationships.
vulnerability · yeswehack.com
YESWEHACK PROPHILE ON SONNY
A YesWeHack 'Prophile' spotlight from July 2020 featuring ethical hacker Sonny, part of a series profiling members of the bug bounty community and their hunting stories.
Back