Thread by @intigriti

🔴LIVE MENTOR SESSION: @TomNomNom will answer your #BugBounty and tooling questions for the next 4 hours! Comment with your question! 👇

Question from @amalmurali47:
"Among the tools that you've created, which one is your favorite?"

Question from @KarimPwnz:
"Do you think there should be more dynamic automation through browser extensions?"

Question from @BugReplay:
"What are your favorite bug bounty #tools, and why?"

Question from @evadon14: "Do you have any trick or method to find rce & xss automatically in burpsuite ?"

Question from @evadon14: "Any xss finding tool you have not released yet ? Would u like to release it now ?"

Question from @zeroxyele:
"How to get started into the bug bounty? (!)"

Question from @streaak:
"What's your monitoring setup like?"

Question from @migueljimeno96:
"How do you keep your param/subdomain/endpoint/header wordlists up to date and relatively small?"

Question from @nil89822110:
"can you use bash to do the same thing burp does in order to become GUI less"

Question from @nil89822110:
"what advise do you give for finding interesting subdomains during recon?"

Question from @securinti:
"What quick wins would you suggest to improve the Burp/Bug Bounty workflow for people like me that only have limited experience with programming or bash?"

Question from @securinti:
"How do you quickly process : priotize giant amounts of recon when time is limited (for example: 2k hosts got added during a live event last year, with 3 hours left or so)"

⏰ It's a wrap! Thanks everyone for participating!
- Would you like us to do it again?
- If so, who should we ask as a mentor? Let us know! 👂