PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Hunters’ biggest mistake? Expecting immediate results’: ‘RL’ on building a Bug Bounty career

yeswehack.com | blog | #bug-bounty | #interview | #career | #yeswehack | #waf-bypass | #cache-poisoning
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with 'RL' (Harel): starting during Covid via Hack The Box, why documentation is underrated, WAF bypass tricks, and his top find — a Glassdoor cache-poisoning bug via URL parser confusion.
Published
Collected

Related coverage

blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
YESWEHACK PROPHILE ON HISXO
A YesWeHack 'Prophile' spotlight from April 2020 on France-based ethical hacker HisXO, covering his path from penetration tester to active bug bounty hunter and his favourite tools.
blog · yeswehack.com
[ITW] Daniel Kalinowski: “Participating in bug bounties improves your skills and increase the overall knowledge.”
A conversation with Polish bug hunter Daniel 'Kalin' Kalinowski on breaking into security from IT ops, why bounties sharpen your skills, and how to stay current on new exploit techniques.
blog · hunt.io
From Munitions to Malware: Joseph Harrison on Threat Detection & Digital Forensics
An interview with threat lead Joseph Harrison: from Air Force munitions to digital forensics, the discipline behind his detection work, and how he uses JA4 fingerprints to catch what others miss.
blog · hunt.io
Interview with Daniel Plohmann: Malpedia, Malware Analysis, and Research Insights
An interview with Daniel Plohmann: building Malpedia and MCRIT, his path from network simulation to malware research, collaboration in the field, and music as an outlet away from security.
Back