The End
There won't be any bug reports today, and I've decided to wrap up this series here. Over the years, there have been more valid submissions, but I don't feel like sharing everything all at once.
The bug bounty journey is still ongoing, just the writing is taking a pause.
Answering Some Questions
Why did you create this series?
I kept getting the same questions at local meetups, so I decided to put together this series to share my experience. I wanted to show that there are still real ways to land your first bug.
Are these stories real or just AI-generated hype?
They're all based on real experiences. I've used AI to polish the writing and make it more conversational, but the stories themselves are genuine. I also chose to publish in English to reach a broader audience.
Do you recommend doing bug bounty full-time?
Most bug bounty hunters I've met treat it as a side hustle. They usually have a full-time job in cybersecurity, which helps them sharpen their skills. Having a stable job also takes a lot of pressure off, especially when your findings aren't consistent.
A lot of questions will answer themselves once you actually give it a try. So my advice is simple: start your bug bounty journey today and find your own path.
My Thoughts on the Triage Team
There were times when I couldn't find any bugs at all. Or when I asked for clarification and the program holders didn't respond properly. It's easy to get frustrated and start complaining.
The turning point came one day when I met the triage team in person. We had a long conversation about how things work from their perspective, how to improve the overall process, and more. I was amazed at how wrong my assumptions had been when I'd only communicated with them through email.
These are incredibly talented people working together as a team. Their vision for improving the industry and what they've already accomplished is really inspiring. Maybe I'll share some of those conversations one day.
There are brilliant people out there. Talking with them is genuinely enjoyable, and I'm definitely planning to continue participating in these bug bounty programs in the future.
Stay Tuned
That's a wrap for this series! I'd love to hear your thoughts. Leave a comment to share what you think. Got any questions? Found your first bug yet? Or anything else you want to share? Everything is welcome.
That's it for today. More to come soon.
If you'd like to support me, feel free to buy me a coffee: https://ko-fi.com/awchjimmy