Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter

yeswehack.com | blog | #bug-bounty | #automation | #vulnerability-disclosure | #interview | #yeswehack | #recon | #hacking

Summary

YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
Published
Collected

original ↗

Related coverage

blog · yeswehack.com
How to use Gemini CLI for Bug Bounty research: analyse evidence, validate manually
Learn how to use Gemini CLI for Bug Bounty research to analyse captured traffic and source code at scale, surface leads and validate findings manually.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
YESWEHACK PROPHILE ON S5S
A YesWeHack profile of Chinese hunter S5S, covering his start in bug bounty, focus on recon and code review, learning-from-write-ups approach, and his 'learn, practice, persistent' manifesto.
blog · yeswehack.com
YESWEHACK PROPHILE ON HISXO
A YesWeHack 'Prophile' spotlight from April 2020 on France-based ethical hacker HisXO, covering his path from penetration tester to active bug bounty hunter and his favourite tools.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
vulnerability · yeswehack.com
How we help our clients step-by-step in their Bug Bounty journey
Interview with YesWeHack's Head of Customer Success on guiding clients through their bug bounty journey: scoping and launching programs, keeping them attractive to researchers, managing relationships.
back