I don’t typically read newsletters but I thought I would give the one by
@securibee
a go.. and it didn’t disappoint! What a great way to distill down genuinely interesting tweets, HN posts, and short news bites.
If you find twitter cluttered, sign up at
Some Bug Bounty resources:
- A curated collection of wisdom nuggets to level up your bug bounty game
- Guide to learn hacking
- Codingo's YouTube
- Farah Hawa's YouTube
Use this Twitter search query to easily keep up-to-date with your favorite
#BugBounty
platforms:
(from:hacker0x01 OR from:bugcrowd OR from:intigriti OR from:yeswehack OR from:synack) -filter:replies
Subdomain Takeovers, beyond the basics for Pentesters and Bug Bounty Hunters by
@codingo_
Discover the tricks to subdomain takeovers that go beyond the basics, allowing you to find more impactful findings in a pentest, or on a bug bounty program.
Succeeding in bug bounty is like a marathon.
There are people on the side lines cheering you on, handing you water and a snack when you need it.
Maybe they're even participants, running buddies, some being pacemakers.
You get better over time, stay the course.
#BugBountyTips
🐝 From the
#HiveFive
archive
HTTPie
A modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.
@httpie
Earlier today on
@NahamSec
Twitch stream someone asked if bug bounty is largely luck based. I replied with the following quote "Absolute Success is Luck. Relative Success is Hard Work."
You can read more about it here
#bugbounty
#bugbountytip
During NahamCon someone approached me and asked if I could share more
@NahamSec
Sunday Recon interview notes.
Silly me, I wasn't even aware that anyone read them.
Here are my
@Jhaddix
notes:
I hope they're useful!
#bugbountytips
#bugbountytipjar
xnLinkFinder by
@xnl_h4ck3r
A python tool used to discover endpoints (and potential parameters) for a given target:
- Crawl a target (pass a domain/URL)
- Crawl multiple targets (pass a file of domains/URLs)
- And much more
#HiveArchive
When choosing a new habit many people seem to ask themselves, “What can I do on my best days?”
The trick is to ask, “What can I stick to even on my worst days?”
Start small. Master the art of showing up. Scale up when you have the time, energy, and interest.
—James Clear
🐝 Hive Five 133: How to Study Bug Bounty Hunting
🧶 HTML Over the Wire
@healthyoutlet
🐛 CSRFing VS Code's Debug Adapter Protocol
@_Z7mcnulty
🔍
@Hahwul
releases Noir
📚 How to Study Bug Bounty Hunting
@insiderphd
🤫 Leaked Secrets and Unlimited Miles
@samwcyo
Buzzworthy:
Let me tell you about one of my
#defcon29
stories. It revolves around
@seclilc
.
I met her at the
@ine
booth. Meeting her was so fun, she didn’t realize it was me at first.
Fast forward to the closing ceremony. I was sitting alone and
@seclilc
invited me to sit with her.
Another week, another 🐝 list
🚀Level up your bug bounty skills and dive into some books!
🔔15 recommendations by top bug bounty hunters - covering web apps, mobile, and programming.
📚Authors
@ZephrFish
@yaworsk
et al.
#bugbountytips
#bugbountytipjar
#365bees
Day 27: 🐝 more like
@mcipekci
Mustafa, an engineer from Turkey, with incredible breadth of hacking knowledge and experience. Active on most bounty platforms. Always ready to lend a hand, both in public and behind the scenes.
Thank you 🙏
Does anyone know of a strong bug bounty/security research team looking for help in improving researcher experience?
I’m looking for something new!
(RTs appreciated + DMs are open 🙏)
#365bees
Day 41: 🐝 more like
@samwcyo
Sam aka zlz is a hacker and bug bounty hunter for 4 years. He's been doing it full-time, gives talks and interviews, is always there to lend a hand, plus has amazing write-ups on his blog.
Thank you 🙏
@NahamSec
's interviews are such gems. Shows different facets of bug hunting. How it pays off to be different. Picking the brains of amazing people.
A big thank you to everyone involved.
#WeAreInThisTogether
Excited to see
@assetnote
's Kiterunner tool in action!
🐝 Will be included in tomorrow's Hive Five newsletter.
✅
@NahamSec
is checking it out on stream today!
✅
@InsiderPhD
is digging into it for a new video!
#bugbountytips
@hakluke
Learn how to:
- GoogleFu: problem solving is key
- Document: note taking will accelerate learning + help you work through problems
- Learn: set up a plan/goals, get the most out of your time
- Communicate: being able to put your thoughts into words
Lastly I'd join a community!
I encourage you to watch the latest interview by
@NahamSec
with
@DanielMiessler
!
This one hits different. I especially enjoyed the part near the end which wasn't infosec related.
Currently on Twitch for subs only but it'll be on YouTube soon!
Alot of a...sharks out there...try'na take a bite of somethin' what's hot
Lot of chameleons out there...try'na change up
Anytime somethin' new comes along...everybody wants a bite
Don't happen overnight
So you wanna be a bug bounty superstar?
@theneedledrop
The latest addition to communities that I frequent. I enjoy watching his stream and finding new music to listen to. Anthony Fantano, the internet's busiest music nerd reviews and reacts to music live.
#365bees
Day 42: 🐝 more like
@harshbothra_
Harsh is a security engineer, bug bounty hunter, pentester, author, and blogger. He's reached the Bugcrowd top 150 and MVP '20. He inspires people with his
#Learn365
, interviews, and talks.
Thank you 🙏
#365bees
Day 12: 🐝 more like
@codecancare
Eric crossed $1M in bounties. His handle is a reminder to focus on the gift we are given with each new day. His friendly demeanor, and automation are highly sought after.
Thank you 🙏
🐝 Hive Five
#26
– DOM XSS, voicemail ATO, and 10K4ILF
🛠 Fleex by
@sw33tLie
- create multiple VPS on cloud providers and distribute your workload
💪
@hakluke
completely rewrote hakrawler from scratch to release v2
❤️
#10K4ILF
help get
@InnocentOrg
to 10K followers
#365bees
Day 26: 🐝 more like
@ITSecurityguard
Patrik has 7 years of triage experience and is a triage manager
@Hacker0x01
. He's amassed a wealth of knowledge that he shares on Twitter, in interviews, and in talks.
Thank you 🙏
Measure yourself against who you were yesterday.
At times it can be hard to notice improvements. Keep going, you'll inevitably find your first bug.
Don't be too hard on yourself. Social media shows you wins, but doesn't show you the hard work, failures, and struggles.
🐝 New Bee List: 18 Inclusive Communities Worth Joining
In these strange times it’s important that we come together. A good way to find like-minded individuals is to join a community.
Here are my favorite ones, most of which I frequent at least weekly.
#365bees
Day 22: 🐝 more like
@Farah_Hawaa
Farah took InfoSec + bug bounty by storm. Relatively new, her YouTube channel is already a staple. While working
@bugcrowd
she continues to inspire.
Thank you 🙏
#365bees
Day 30: 🐝 more like
@spaceraccoonsec
Eugene works
@GovTechSG
. Received 1st bounty when he was 24 (2019).
@Hacker0x01
MVH + best team winner. Loves Singapore + communities. He gives back by sharing his knowledge and experience.
Thank you 🙏
I miss the old internet, straight from the start internet
Connecting our souls, sharing our hearts internet
I hate the new internet, the fake news internet
The trolls and haters, spreading abuse internet
I miss the pure internet, where knowledge was free internet
The secrets of automation-kings in bug bounty
➕ Uncover the strategies of bug bounty automation experts.
➕ Find the key to success with 1day (or 1month) web exploits.
#365bees
Day 21: 🐝 more like
@snyff
Louis is a passionate security engineer. He founded
@PentesterLab
, making learning web hacking easier. He goes above and beyond to keep it affordable and to deliver maximum value (+ stickers).
Thank you 🙏