PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips

yeswehack.com | blog | #ai-security | #bug-bounty | #account-takeover | #phishing | #methodology | #interview | #manual-testing | #oauth | #security | #m365 | #sn0rky
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
Published
Collected

Related coverage

research · volexity.com
Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks
# Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks December 4, 2025 Matthew Meltzer, Steven Adair, and Tom Lancaster In early 2025, Volexity...
research · osec.io
How we broke exchanges: a deep dive into authentication and client-side bugs
OtterSec details OAuth misconfigurations that lead to account takeover in exchanges, SDKs and wallets, including Google GSI/FedCM flow quirks and desktop-vs-mobile environment gaps.
research · volexity.com
Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows
# Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows April 22, 2025 Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, and Tom Lancaster Since...
research · slcyber.io
Taking over Azure DevOps Accounts with 1 Click
1-click Azure DevOps account takeover via subdomain takeover chained with OAuth redirect token theft.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
Back