🎙️ HTB Stories #8: Bug Bounties 101 w/InsiderPhD
Timestamps:
0:00 - Intro
03:20 - IppSec Intro to AmA
04:25 - Katie introduces herself
05:45 - How did you get into Cyber Security?
09:55 - What do you teach?
13:44 - Is there a certain vulnerability type you recommend people search for first?
16:00 - When looking at a list of programs, it can seem overwhelming, with so many options how do you pick one to tackle first?
18:07 - Whats your methodology when you first start a program?
20:30 - When learning, should you focus on automated tooling, manual methods, or a combination of both
24:45 - Alot of people struggle to maintain motivation when not finding anything for a while, do you have any tips on how to stay motivated?
29:18 - For people coming into cybersecurity, alot of discussion is happening on degree's v.s. cerifications, what your take on this? Do you feel one provides more benefit / knowledge then other?
35:00 - Looking back, what things would you change, or do again?
37:10 - What books do you recommend?
40:01 - For someone with no prior experience, what key skills do you recommend learning?
43:05 - How do you recommend planning your time to be successful?
44:22 - What are you thoughts on automation within bug bounty? Is it possible to be successful without it?
46:30 - How do you keep up to date with technologies as they evolve?
48:00 - Do you think bug bounty could ever be a primary-source of income for people, or should it be more of an "on-the-side" thing
51:50 - What software do you recommend for taking notes?
53:50 - Where can people find more of what you do?
59:00 - Ippsec Closing