Comment on Mentorship Monday - Discussions for career and learning!
iamak@infosec.pub 3 months ago
How do I upskill myself to be able to do bug bounties? I have participated in many CTF competitions but I don’t know how well that skillset will transfer to bug bounties and if yes how to transfer it
shellsharks@infosec.pub 3 months ago
Not a bug bounty hunter myself, but it seems like one of those things that you just have to jump into and start trying to do. So many bounties seem to be pretty low-hanging fruit type of stuff. The payouts might be either LOW or non-paid, just recognition type stuff, but seeing an accepted bounty submission come back does a lot for your confidence. It’s like CTFs in a way. Getting into CTFs seems intimidating at first, but then when you go actually do one and you have some level of success, it starts to feel a bit more approachable, you get more XP and you do better the next time.
You could also check this out www.bugbountyhunter.com/zseano/ and anything/everything from portswigger.net as that team is the best I know in terms of cutting-edge web app research.
iamak@infosec.pub 3 months ago
Thanks a lot. I’ll check both the sources as well!