Thread by @sillydadddy

#bugbountytip

I completed 6 months in BB

Things I learned :

1 . Never trust the platform .Don't waste time sending support mails or contact their high profile employees who boast in public about researcher well fare .All you will get is "professional English" in return .

Solution :- Just move to the next bug

2. Most part of BB community is awesome .But not all . I should adhere caution on whom I follow and trust .There are people just fake bounty payments

3.Never share "yay I awarded" .It will only attract frustration energy towards me .

Share knowledge .be humble .refrain from boasting about your bounty amount

4. Basics Basics Basics. I understood the importance of reading books like wahh and doing labs like @PentesterLab and others

5. BB is a tough job .Patience is important

6. Stick to one program . I am yet to choose one

7 . Note taking in an organised way is very important

8 . Follow a checklist

9 . Read writeups and reports .They are gems

10 . Don't stress.Enjoy the process .

11. Follow some awesome hunters . Know the fake ones who come on the screen to show off and make some extra income .
I admire @fransrosen @zseano @Jhaddix @brutelogic @HusseiN98D
and many more .
I learned to recognise people who really know stuff versus just show offs

12 . There are many hidden bughunters who don't bother to come in limelight . One much person is
@k_v0
.There are many like him .They are just awesome .

13. Awesome WhatsApp statuses won't make a good hacker. I used to think like that . But when talking they even lack basics

14. Don't get disheartened that it will take time to excel in BB . If you work hard I think you can succeed.
I used to study for 12 hours in the initial months . Just joining some WhatsApp group will not make u a hacker . It will give u a false sense of achievement

15. Watching YouTube and other videos also make you feel like you are a good hacker .But when you practice you will tremble . Practice practice practice

16. Mental health should be taken care .Do excercise , meditation and slowly build the strength to face the triagers !! :-)

17. Some programs really function unethically.They have a BB program just for the sake of marketing . Identify them early and move on the next program

18 . If the community was not sharing I wouldn't have found anything . So its my responsibility to give back anything I can .

19 . BB is nothing like OSCP .

20. Twitter has options to mute certain words . I mute " yay I was awarded" and other words for my peace of mind !!

Thanks for reading.

P.S . I am not writing these to get some followers or get famous in Twitter .Recently i got a comment from someone saying "oh you are posting much in Twitter".

I just don't care what people think of me . I continue what I feel is right .

Thanks