Summary

  • This article on starting a bug bounty focuses on the things the author would do differently if they were to start again, guided by the benefit of experience.
  • The author recommends focusing on learning website fundamentals rather than rushing to use many tools and scripts that are not understood; the underlying architecture and how websites work should be understood before any testing is undertaken.
  • It is also recommended to focus on one programming language to learn, with the author suggesting JavaScript; this is the language that 90% of bug bounty targets are based on, and understanding it will allow for effective debugging at an advanced level.
  • The use of free resources such as YouTube and free online courses are recommended, and learning should be focused yet matched to your interests and passions.
  • It is advised to not worry about specialising in a particular industry, as this can come later once the basics have been mastered and a preference emerges.

By Abhijeet Kumawat

Original Article