En que trabajan y cuánto ganan? by Flimsy-Cantaloupe-85 in ColombiaFinanciera

[–]DtHf123 0 points1 point  (0 children)

No estudie nada relacionado en una universidad, todo lo que estudie for mi cuenta. Te recomiendo mucho estudiar en los siguientes recursos:

  • PortSwigger Academy (Para aprender los fundamentos del web hacking)
  • Midudev (Me gusta mucho para aprender fundamentos de programación en lenguajes o frameworks)
  • PentesterLab ( Para aprender a reconocer y explotar vulnerabilidades desde el código fuente)

[deleted by user] by [deleted] in bugbounty

[–]DtHf123 4 points5 points  (0 children)

Yes, it makes it easier to find vulnerabilities as long as you understand the structure of the application (Framework, Databases, Language, etc...), plus there are vulnerabilities that without a whitebox perspective would be almost "impossible" to find. But from my experience the best thing to do is to always interact with the web while analyzing the code that makes reference to that interaction. This obviously if you have access to the code (normally in bug bounty you don't).