PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Collaboration helped me become successful’: Nagli on becoming a world-renowned Bug Bounty hunter

yeswehack.com | blog | #bug-bounty | #attack-surface | #automation | #interview | #career | #collaboration
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Gal Nagli, a top Bug Bounty earner: how collaborating with specialist hunters drove his success, scaling discovery with automation, and founding attack-surface startup Shockwave.
Published
Collected

Related coverage

blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
[ITW] Daniel Kalinowski: “Participating in bug bounties improves your skills and increase the overall knowledge.”
A conversation with Polish bug hunter Daniel 'Kalin' Kalinowski on breaking into security from IT ops, why bounties sharpen your skills, and how to stay current on new exploit techniques.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · hunt.io
From Munitions to Malware: Joseph Harrison on Threat Detection & Digital Forensics
An interview with threat lead Joseph Harrison: from Air Force munitions to digital forensics, the discipline behind his detection work, and how he uses JA4 fingerprints to catch what others miss.
blog · hunt.io
Interview with Daniel Plohmann: Malpedia, Malware Analysis, and Research Insights
An interview with Daniel Plohmann: building Malpedia and MCRIT, his path from network simulation to malware research, collaboration in the field, and music as an outlet away from security.
blog · hunt.io
Eggs, Alerts, and Adversaries: Talking with Jose Hernandez from Splunk
Splunk's Director of Threat Research Jose Hernandez discusses building detections with Atomic Red Team, detection-as-code pipelines, hiring curious people, and balancing research with farm life.
Back