Intro Bug Bounty Boot Camp has an entire chapter devoted to setting up a Bug Hunting environment. The chapter focuses on Burp Suite. I gained some degree of familiarity with Burp Suite while studying for my OSCP as well as doing some of the Challenges on the PortSwigger Academy. By
Introduction In the last post Picking a Bug Bounty Program I gave my take away from the first chapter of Bug Bounty Bootcamp . In this post I will give commentary on the first chapter of the other two books on my pile and where they will fit into my journey.
What Bug Bounty Bootcamp Says About Picking a Program After reading the first chapter of Bug Bounty Bootcamp my biggest take away was the recommendations for finding a program to focus my efforts on. Vickie Li breaks the decision down into a few concrete axes: * Asset type — social apps (high
The Destination Before the journey starts I need a destination. I need to decide what broad category I want to research. The candidates are: * Web Application Vulnerability Research (Bug Bounties) * Mobile Application Analysis * Malware Analysis * Hardware Analysis Web Application Research has some good advantages as a starting point. Bug bounty
The Science of Learning After 50 As I embark on this journey I had to start by asking the question "Can I even do this?" After years of Blue Teaming, Network Engineering, and System Administration — can I make that switch? I had some offensive security knowledge — I even
The journey of a thousand miles starts with one step. We have all heard that and it is very true. Here is my first step into InfoSec Research. Up on this page I will document my journey to contribute to a community that has given me a good career and