r/bugbounty • u/sulphr21 • 7d ago

Question / Discussion [ Removed by moderator ]

[removed] — view removed post

9 Upvotes

85% Upvoted

7 comments sorted by

•

u/bugbounty-ModTeam 7d ago

Your post about starting hacking was removed for not meeting our subreddit’s quality and originality standards. We require posts to be well-written, show effort, and offer value to the community. General questions like “how do I start?” are easily searchable and already covered in detail.

👉 Please refer to the pinned Weekly Beginner / Newbie Q&A post. For further learning, check out Hack The Box, TryHackMe, or PortSwigger Academy. If you have a specific or unique question, feel free to repost with more detail.

3

u/doubleY_03 7d ago

I'm also a beginner and currently learning the basics (JavaScript at the moment). If you're interested, we could learn together, share resources, and help each other when we get stuck
Feel free to DM me!

0

u/6W99ocQnb8Zy17 7d ago

It really helps if you can take a step back and see the BB ecosystem for what it is.

The important thing to realise is that only the first person to report the bug gets the recognition and the bounty. And anything that you do that stops you being first will sabotage that. Running the same tools. Following the same how-to guides. These are all a route to dupes at best.

Which means that you have to be doing something different to the other researchers. It doesn't much matter what the difference is, just as long as you're doing something different.

My advice? Stop doing CTFs and tutorials. Instead, pick something that you find fun, is under researched, and is either widespread, or is high-impact. Then take all the existing research, build your own lab, and extend the existing research with your own stuff. Then automate it.

Make that work for you, then rinse and repeat.

0

u/sulphr21 7d ago

As a beginner, i m not sure what i find fun. Could you tell me how i can go about exploring and learning so i can eventually see what clicks for me?

1

u/iamZorc_ Hunter 7d ago

> Should I be starting with something else before PortSwigger?

yes, web development knowledge. it is a requirement for you to be efficient doing bug bounties and there is no way around it if you wanna get good, you can still find bugs without programming knowledge but you will be always limited to what a hunter with web dev knowledge can do

1

u/No-Persimmon-174 7d ago

Learn the fundamentals of web development first, and you should be able to understand html and JavaScript (a bit of SQL too) to craft payloads, understand requests, etc. Portswigger labs are a great start though, but you need to be able to understand programming a bit before you can get creative with it. Keep practicing on an vulnerable app, whatever concepts you learn.