Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? This is the time and place to ask!

  • iamak@infosec.pub
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    How do I upskill myself to be able to do bug bounties? I have participated in many CTF competitions but I don’t know how well that skillset will transfer to bug bounties and if yes how to transfer it

    • shellsharks@infosec.pubOPM
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      Not a bug bounty hunter myself, but it seems like one of those things that you just have to jump into and start trying to do. So many bounties seem to be pretty low-hanging fruit type of stuff. The payouts might be either LOW or non-paid, just recognition type stuff, but seeing an accepted bounty submission come back does a lot for your confidence. It’s like CTFs in a way. Getting into CTFs seems intimidating at first, but then when you go actually do one and you have some level of success, it starts to feel a bit more approachable, you get more XP and you do better the next time.

      You could also check this out https://www.bugbountyhunter.com/zseano/ and anything/everything from https://portswigger.net as that team is the best I know in terms of cutting-edge web app research.