---
id: 909
title: "ZwinK’s Tips and Tricks to Crush Bug Bounty #4 & #5"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/zwinks-tips-and-tricks-to-crush-bug-bounty-4/"
published_at: "2021-06-22T00:00:00Z"
tags: ["bug-bounty", "burp-suite", "waf", "vpn", "bugcrowd", "hacker-tips", "manual-testing", "duplicates", "researcher-tips"]
phying_url: "https://phying.com/item/909"
lang: en
---

# ZwinK’s Tips and Tricks to Crush Bug Bounty #4 & #5

## Summary

ZwinK urges manual testing with Burp Suite instead of scanner blasts that end in duplicates, and recommends a VPN with a large IP pool so WAF blocks don't stall testing on well-defended programs.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2021-06-22T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/zwinks-tips-and-tricks-to-crush-bug-bounty-4/
- **Phying News:** https://phying.com/item/909