noellarkin
Senior Member
- Mar 14, 2021
- 1,006
- 1,492
That's fascinating. You're a professional pen.tester I assume?
What technical skill sets are required for one to do bug hunting on these sites?
Recent bug on Quora worth $500
- Thread starter awesomewebsites
- Start date
What technical skill sets are required for one to do bug hunting on these sites?
CyberGen
Regular Member
- Mar 11, 2020
- 334
- 140
You submit it at hacker one website?
Zera Api
Failed to resolve a dispute resolution thread.
- Jun 28, 2013
- 2,097
- 579
What would qualify as critical bug
Is there any process to find out a bug that matters
- Nov 16, 2011
- 19,794
- 11,287
I do not have any degree related to IT. No work experience in this field as well. I learnt everything from Google.
- Nov 16, 2011
- 19,794
- 11,287
For programs listed on hackerone, you submit on hackerone.
Critical bugs are like if you can login another user account in Facebook.
Zera Api
Failed to resolve a dispute resolution thread.
- Jun 28, 2013
- 2,097
- 579
Facebook is such a big sucker
- Nov 16, 2011
- 19,794
- 11,287
Actually one of the bugs I found is surely eligible for bounty. I wish I had way to contact Mark Zuckerberg directly stating him the details of the bug. I can get their attention by posting it on medium or so but they will not pay me in that case as disclosing bug before fix is not allowed. The bug allows me to find the amount donated by any Facebook user in a fundraiser even if he has choosen to hide it.
CyberGen
Regular Member
- Mar 11, 2020
- 334
- 140
Well It could be fun to like scrape websites. Find websites that have a decent earnings. Use berp suit to find bugs and then sell the bug to them
- Nov 16, 2011
- 19,794
- 11,287
I had a plan to hire an employee for this. I have done similar thing on own but my time is giving better returns in other works currently.
CyberGen
Regular Member
- Mar 11, 2020
- 334
- 140
Well I have plenty of time, I'll try this out!
- Nov 16, 2011
- 19,794
- 11,287
It looks hard till you try it. Once you find first bug, you will feel motivated to find more.
- Nov 16, 2011
- 19,794
- 11,287
$3000
Caius Julius Caesar
Junior Member
- Dec 30, 2019
- 123
- 267
You can do some OSINT and find his email and send mail to him.
If you search " [email protected] " on Google, the first result is his Facebook page.
Also, [email protected] seems to be another mail of him.
Maybe you can find his personal mail with some OSINT magic.
Btw OP maybe you can do some Bug Bounty beginner tutorials and teach us from your experience for free.
- Nov 16, 2011
- 19,794
- 11,287
It is hard to find an email id of his that he actually uses daily. I wish he is reading bhw.You can do some OSINT and find his email and send mail to him.
If you search " [email protected] " on Google, the first result is his Facebook page.
Also, [email protected] seems to be another mail of him.
Maybe you can find his personal mail with some OSINT magic.
Btw OP maybe you can do some Bug Bounty beginner tutorials and teach us from your experience for free.
HustleTong
Elite Member
- May 30, 2019
- 13,466
- 10,661
You can report it to Bass Boosted and hopefully earn some bass.
- Nov 16, 2011
- 19,794
- 11,287
Yes big sites like google and Facebook pay a lot. There are some sites like shopify where there are frequent updates and thus chances of finding bugs is also more.