Make money finding bugs on websites- Useful tips to be more efficient

A

awesomewebsites

Elite Member
Jr. Executive VIP
Jr. VIP
Joined
Nov 16, 2011
Messages
19,799
Reaction score
11,280
I have started to submit bugs again on different security programs in my free time and it is giving good results as well.

Some screenshots to start with :

zcP4Tyf


1j0ci3E


How you can also make money finding bugs on websites:

1) I will suggest to start with reading disclosed reports on Hackerone.com. In these reports you can read about the bugs found by other security researches.

2) Newly added programs are easier as there is more possibility of finding bugs there. You can find latest programs here: https://hackerone.com/directory?query=type:hackerone&sort=published_at:descending&page=1

3) Similar to point 3, if you find a good bug on popular website (Yahoo, Twitter) and then disclose it there, you can get invitations from programs not listed publicly on hackerone.

4) Sometimes, you find a bug on one website and then report the same bugs on other programs as well.


If you have any questions regarding this, post below and I will try to answer. Happy bug hunting. :)
 
Advertise on BHW
I have tried it with Uber, they gave me once 350 bucks but then I reported another one (after few days)and they didn't give a penny also :-p
 
soccerlover said:
I have tried it with Uber, they gave me once 350 bucks but then I reported another one (after few days)and they didn't give a penny also :p
Click to expand...
When was that ? Their minimum payout is $500 currently. They have one of the most generous bug bounty programs.
 
I always wanted to try bug hunting.. thanks for the tutorial. But I am assuming you would need to know how to code right?
 
beingink said:
I always wanted to try bug hunting.. thanks for the tutorial. But I am assuming you would need to know how to code right?
Click to expand...
Not at all. I do not know how to code. :)
 
But finding bugs on websites means, you need to do VAPT and that's not an easy thing to master. Plus you also need permissions I presume.
 
beingink said:
Oh interesting. I have always loved finding loopholes. Care to PM me how exactly I find anything or basically get started?
Click to expand...
I will suggest to start with reading disclosed reports on Hackerone.com. In these reports you can read about the bugs found by other security researches.

Better, keep everything here, so that everyone can benefit.
 
krishnaverma said:
I have started to submit bugs again on different security programs in my free time and it is giving good results as well.

Some screenshots to start with :

zcP4Tyf


1j0ci3E


How you can also make money finding bugs on websites:

1) I will suggest to start with reading disclosed reports on Hackerone.com. In these reports you can read about the bugs found by other security researches.

2) Newly added programs are easier as there is more possibility of finding bugs there. You can find latest programs here: https://hackerone.com/directory?query=type:hackerone&sort=published_at:descending&page=1

3) Similar to point 3, if you find a good bug on popular website (Yahoo, Twitter) and then disclose it there, you can get invitations from programs not listed publicly on hackerone.

4) Sometimes, you find a bug on one website and then report the same bugs on other programs as well.


If you have any questions regarding this, post below and I will try to answer. Happy bug hunting. :)
Click to expand...
You need to be a programmer to do this? Where does one start from? Where does one get materials to read when starting? Thanks
 
Stencil said:
But finding bugs on websites means, you need to do VAPT and that's not an easy thing to master. Plus you also need permissions I presume.
Click to expand...
Most of the websites have bug bounty programs and thus they already want security researchers to test for the bugs. You can find such websites on platforms like Hackerone and Bugcrowd.
 
Thanks for sharing, i will try this method , but wish me good luck , because i´m newbie and it looks like easy
 
dzejdy said:
Thanks for sharing, i will try this method , but wish me good luck , because i´m newbie and it looks like easy
Click to expand...
Good luck. Everyone is a newbie when starting.
 
congrats bhai ! can you suggest what programming languages and what skills are required to find bugs ? is there a order off things to learn , i know it takes years to achieve these , but is there any blueprint to become bug hackers , especially website penetration ?
 
shiva990 said:
congrats bhai ! can you suggest what programming languages and what skills are required to find bugs ? is there a order off things to learn , i know it takes years to achieve these , but is there any blueprint to become bug hackers , especially website penetration ?
Click to expand...
I do not have much knowledge of programming languages. I find bugs like logical bugs, IDOR, missing good practises, etc only.

This sequence should do :
1) Read about the different types of bugs on Google.
2) Then find disclosed reports related to each type and try to replicate them on other websites.
3) If you are young, you can give it a serious attempt and enroll in related courses. A lot of people do this full time. There are also jobs for security ready searchers in all leading online companies.

All the best.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top