This is insane
Vitor Falcão "busfactor"
1,073 posts
Vitor Falcão "busfactor"
@busf4ctor
Full-Time Bug Bounty Hunter |
🥈 2x Google bugSWAT 2nd Place |
🥇 1x Google bugSWAT Best AI VRP Researcher
- Today I discovered this gem exploit-notes.hdks.org
- The first month of full-time hunting ended very well!
I completed my second week as a full-time hunter. It's hard, but having @Rhynorater, @xssdoctor, @un1tycyb3r by your side makes it easy. Last month's stats (half as a full-time hunter): 2 crits triaged 2 highs triaged 1 crit pending triage 3 Google Cloud VRP bugs pending triage - A few months ago, I began studying bug bounties extensively. I've made my list public, and you can submit links to help expand it!
- Looks like the new tool that I wrote in 1 hour is making some profit 😎🤑
Are there any tools that check for reflected parameters from URLs and headers and are not Burp Pro extensions? Will I have to write my own? - Most people believe SQL injections are in the past. They say it's hard to find them. The main issue is the use of automated tools like SQLMap. I'll go through the reasons in this thread so you can give your opinions.
- Just snagged my first @Hacker0x01 recon bounty thanks to @Jhaddix's course! Seriously, I just followed the slides, followed all those steps, and found what others missed! The course paid for itself 🎉
- This is a nice one-liner that I am already using
- It only took 30 minutes to go from "new" to "triaged"! 🤯
- New blog post! It took me a few months to get motivated to write again, but here we are with a remarkable client-side chain I found with @xssdoctor
- I love you @xssdoctor! We got $7,500 for our bug :) Yay, I was awarded a $3,750 bounty on @Hacker0x01! hackerone.com/busf4ctor #TogetherWeHitHarder
- About three months ago, I began full-time bug bounty hunting. It's been a great journey. Read about it on my blog 🙂
- I completed my second week as a full-time hunter. It's hard, but having @Rhynorater, @xssdoctor, @un1tycyb3r by your side makes it easy. Last month's stats (half as a full-time hunter): 2 crits triaged 2 highs triaged 1 crit pending triage 3 Google Cloud VRP bugs pending triage
