Referring to a really great post by u/Alardiians on a topic that hits close to home, I’d like to share my own experience with Bugcrowd.
I started doing bug bounty hunting a year ago, and I still can’t call myself an incredibly brilliant hacker. However, I know that I have the ability to think outside the box and find things that hundreds of people before me have missed.
I originally started on H1, and after having a report rejected on a cryptocurrency exchange program — a report I had absolutely no doubts about — I decided to move to another platform that wouldn’t behave so shamelessly (oh, how naive I was).
After moving to Bugcrowd, I found a program that interested me and dug deep into it, studying it and discovering several vulnerabilities (three P2 vulnerabilities).
And you know what?…