Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

The point behind this article is focused: start thinking and stop performing a ritual. If you have a methodology that you got from someone else, it's probably not going to work for you. It was built for their brain, their targets, their pattern recognition, their experience and their interests. Real good bugs come from understanding an application and not some checklist.

The next big claim is about focus. Sitting in deep focus is super hard. It's uncomfortable and boring. But, these are where good bugs are found at! Sit in the uncomfortably instead of scrolling Twitter, or reading some new article. You have to slow your brain down and stop seeking the next dopamine hit.

They give some tips to fix both of these issues. Days 1-2 are the reset. Cap your hunting at 4 hours, pick your biggest distraction to kill it, and go on a walk without your phone. All of these rest the brain to want to focus on the harder challenges in the bug bounty realm.

For days 3-4, the goal is more focus. Pick a single writeup and read it in detail; really understanding the whats and the whys of it. Go on walks with no music or anything. Just notice what's around you and think. For days 5-6, pick a single target and ask yourself a lot of comprehension questions about how the application works. Rebuild the curiosity for yourself. Finally, test a single feature in the application and go crazy on it.

A good reminder that our brain is the tool and the goal is to find bugs.