How to Differentiate Yourself as a Bug Bounty Hunter - Mathias Karlsson @avlidienbrunn
Вставка
- Опубліковано 5 лют 2025
- There are a lot of illusions and misconceptions around the bug bounty industry. Is it too late to join? Are all the vulnerabilities already found? Is everything automated nowadays so there's no way to be late to the party?
Frans and Mathias have been in the mythical world of bounties for a few years and will share their thoughts and ideas on how to actually approach it technically, methodologically and mentally. And also, how to use bug bounties for your own advantage, to improve your career and to increase your pentesting and vulnerability hunting skills.
OWASP Stockholm:
www.owasp.org/...
Mathias Karlsson:
/ avlidienbrunn - Наука та технологія
Was that Gollum in his incognito voice near the end of the Q&A? Good to hear he's out of his cave! 😂 Great talk. Awesome guy!
Great! This helped me a lot! Thanks Mathias :)
it should be " Bugs found / ( risk of duplicate * time taken) = BBE" @2:44
What about : ( bugs found * probability of not duplicate ) / time taken 🤷🏽♂️
Great videos
Awesome :D
But somehow experience should be considered against time taken, since time taken by someone like me who is a total noob cant be compared to the time taken for more experienced bounty hunters
I hope you're good at it by now
Assetnote has been removed from the official source.. Is there anyone who have link ?
Thanks..
Www.github.com/benmcewan1 but couldn't get it working since the dependencies based ON flask updated. If you get it working let me know
There's other tools I've yet to look at eg sublert I think is one. Let me know how you get on
1.25 speed it's ok
1.5 is also good
@@ramdomdeepseafish Holy, 4 years has passed
@@Mark_1991_1 Thank you sir. It's okay to necrorevive sometimes :3
0 days? lol thats not "oh". it's zero days.
It’s pronounced both ways. I’ve heard Jason Haddix pronounce it like him.