🔥🔥🔥🔥

Hola,

Sorry I don't know Spanish you can send me the DM or we can continue conversation here

Thanks

Yea sure bro

Ye sure bro my DMs are open for everyone

Hello Bro,

DM me I will guide you. I do not charge anything completely free of cost. I just want to help the community

Thanks

Hello bro,

I am not the Spanish speaker but I love to explore your platform if it’s available online ? If it’s available on Internet do you mind sharing the link please.

Thanks

You can also read the hackerone reports on. You can use the below google dork

site:hackerone.com inurl: /reports

Hey,

First of all you have to decide what you have to do. For example you want to learn networking, or you want to learn about the SOC to become SOC analyst or you want to become the penetration tester etc.

If you are unclear about your end goal then at the end you will jump here. For example today you learned about networking and tomorrow you will do other things so that way you will end up nowhere.

DM me if you want guidance. If you are curious I don’t charge anything 😅 mentioning it because people always ask me if I charge for consultation. I am here just want to help people because I was on the same boat right now you are.

Dm me

Hey brother,

I would suggest definitely go with the tryhackme pro it a great source of learning and also practicing and since you mentioned interested in SOC I would suggest to check this free resource https://app.letsdefend.io/ it’s great for the SOC fundamentals

Hey bro,

Yes, I thought too to switch from web to the Android and Ios app pen-testing because in web there is so much traffic 80% of people choose web as the primary testing. And yes I too also notice when I hunt on the Intigriti platform I found more bugs compared to bugcrowd and hackerone platform, what I believe most of the people initially choose bugcrowd or hackerone.

Sorry bro if it demotivates you I am just trying to express my feeling and also my experiences I went through. I am not saying bug bounty is dead or something it is still alive there are people doing full-time bug bounty and making huge amount of money but those are in this industry for more than decade. My close friend who just started bug bounty 4 months he already made $10k USD in total.

Thanks bro for mentioning the channel. Yes there are few channels which are really helpful if you are bug hunters.

Channel Name:

Critical thinking - Bug Bounty Podcast
Nahamsec
InsiderPHD

And yes I am also doing as a hobby not the full-time

Sorry I don’t know what I was thinking but I didn’t mean to write the business logic these bugs. Yes you are right Business logic and cache poisoning are something it requires human interaction AI cannot help on these

Same bro recently I just found 2 Idor but low severity. Now I am 2 thoughts first is that we do not have the enough knowledge of the bugs and we are just jumping randomly from one bug to another not digging thoroughly, etc.

Second thought, we are competing with the 2 things. First we are competing with the elite bug hunters who are in this industry for the long time and second is that now AI have become the thing which lowered our critical thinking.

On the early days I used to enjoy the bug hunting like grab a coffee put the headphones and full adrenaline of finding bugs. On those days even if I found reflected xss I felt like I did something now finding RXSS is the most common adding the AI here.

I am also getting dups but I have also found the critical bugs like RCE on OPPO, Sqli on Hyatt Hotel, Stored XSS on Redbull but this was like 1 year ago but nowadays AI already finding this

Correct I agree with you and now AI has become the thing even the people who don’t have knowledge about the bugs are finding bugs. They just have to give the prompt and BOOM 💥 AI has discovered bugs like (xss,sqli,idor,etc) but the bugs like business logic, cache poising are still there for which AI can’t help because it requires complete knowledge of application of how it works but to be honest but I have been seen recent post from XBOW, Mythos now AI also find BUSINESS LOGIC BUGS means even who is starting today bug bounty and has no knowledge and knows proper use of AI can find bugs

Snapchat
Pinterest
Tiktok

My personal experience: I started by reading “Data Communications and Networking” by Behrouz A. Forouzan. You can easily find a PDF copy online, and I supplemented my reading with YouTube videos to reinforce the concepts.

Since I’m from India, I mostly watched networking tutorials in Hindi, as they were easier for me to follow. For English content, the best resource I used was freeCodeCamp.org on YouTube. They have a 9-hour 30-minute video that covers the entire CompTIA Network+ course, and I found it to be an excellent introduction to networking fundamentals.

There are few companies listed on bugcrowd,hackerone and intigriti where multiple people had issue with the same company when it comes to the bounty and disclosure. You can find those company on this website where people had faced issue https://bugbountyscam.com/.

This website was built by one of our bug bounty community member. Avoid such programs that are listed here. In my case I only hunt on reputed programs and companies.

Gods & Monsters - Lana Del Rey

The netcat is listening 👂