PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The power of automation and collaboration in bug bounty

bugcrowd.com | blog | #bug-bounty | #automation | #community | #workflow | #hacker-story | #nuclei | #axiom
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hacker Tess explains how she automated 60% of her bug hunting with Nuclei, Axiom, and Notify, and how community collaboration helped her become Bugcrowd's 2022 Most Valuable Hacker.
Published
Collected

Related coverage

blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · netspi.com
Security Orchestration vs. Automation: What's the Difference?
NetSPI clarifies the difference between security orchestration and automation: scripts handle single tasks, while orchestration connects systems into a consistent vulnerability lifecycle process.
tool · projectdiscovery.io
Community Spotlight: Rishi (@rxerium)
“Open source isn’t about perfection; it’s about putting an idea forward and improving it together as a community.” Rishi (@rxerium) If you’ve spent any time in the Nuclei Templates repository, you’ve almost certainly run something Rishi engineered. With over 500 templates merged, picked up by the likes of the UK’s National Cyber Security Center (NCSC), California Cybersecurity Integration Center, CERT Polska, Spain’s national security agency, and many others, he’s one of the most prolific con
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
blog · bugcrowd.com
The Hacker Culture Manual
Bugcrowd publishes The Hacker Culture Manual, a zine celebrating hacker culture through seven articles and a 2,000-hacker survey, written and designed entirely by humans without AI.
Back