PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Be curious, be persistent’: Icare on thriving as a Bug Bounty hunter

yeswehack.com | vulnerability | #bug-bounty | #rce | #interview | #yeswehack | #libreoffice | #thales
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Icare, Thales pentester and part-time hunter ranked 11th all-time: how he and BitK exploited a LibreOffice CVE for a €10,000 RCE bounty, plus his 'be curious, be persistent' advice.
Published
Collected

Related coverage

vulnerability · yeswehack.com
How we help our clients step-by-step in their Bug Bounty journey
Interview with YesWeHack's Head of Customer Success on guiding clients through their bug bounty journey: scoping and launching programs, keeping them attractive to researchers, managing relationships.
vulnerability · yeswehack.com
YESWEHACK PROPHILE ON SONNY
A YesWeHack 'Prophile' spotlight from July 2020 featuring ethical hacker Sonny, part of a series profiling members of the bug bounty community and their hunting stories.
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
YESWEHACK PROPHILE ON HISXO
A YesWeHack 'Prophile' spotlight from April 2020 on France-based ethical hacker HisXO, covering his path from penetration tester to active bug bounty hunter and his favourite tools.
Back