Thanks for the update :D
Can I ask why you don't submit medium bugs?
I mean sure, high impact = more $$$, but it requires a lot of time to research. Sometimes it's not worth the ROI because many private programs only pay $1k for high and $3k for crits.
If you want to hit that big $, you have...
Sorry for the late reply, I'm still hunting for bugs these days with the help of AI (Claude) reading documents for me.
I don't have tech background, so I only focus on less technical bug types like BAC, logic, race conditions, information disclosure and API hacking (REST and GraphQL).
Most of...
I think private programs are not crucial for success. I have 150+ private programs, but I have succeeded mostly in public. Yeah, public programs are crowded, but in private programs, you compete against someone more experienced who was invited earlier than you.
Besides, most of the private...
Thanks for your update man.
This is the first time I'm seeing someone doing a bug bounty journey, so it got my interest.
I'm going the same route as you; I don't have a technical background, so I mostly focus on logic, BAC, and information disclosure bugs. I don't hunt every day like you...
"Definitely will start the new journey, but that will be for a different site."
So I wondering if you start a new journey, it could be fresh domain and the strategy is still the same? Like only content without building backlinks?
P/s: If you start a new journey, would you kindly tag me in, I...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.