SEC542 Certified People - Bug Bounty - Does anyone here do it?

Jasiono

Hey all

I have a question for those of you who participate in bug hunting (Bug Bounty).

This is something I really want to get into, and I could have posted this here or the jobs section, but considering my question is more so about a SANs cert I posted it here.

I'm slated to be in Virginia Beach for SEC542 and I was wondering if this is a good start to getting into bug bounty that websites such as Hackerone offers?

NetworkNewb

Don't do it, but also something I kinda want to try to at some point... This where I was planning on starting out: https://www.bugcrowd.com/


https://bugcrowd.com/programs

Jasiono

Very awesome!
Thanks for those links.
I read online that it's a good idea to go for the freebie ones initially to build up experience and then head over to the paid gigs. I might look into that route to get started. All the experienced people go over to the paid gigs so it's a smaller pool of experienced players, so to speak.

chrisone

elearnsecurity / EH had a webinar last week about this. It was very insightful and the speaker Jason Haddix (bugcrowd) stayed almost an extra hr answering questions.

https://www.ethicalhacker.net/eh-net-tv/eh-net-live/video-bug-hunting-as-a-second-income/

Jasiono

Very awesome thank you!