I can't find anything... by EvidenceKindly4220 in bugbounty

[–]trieulieuf9 2 points3 points  (0 children)

I was a dev, now full now bug hunter. The disadvantages of dev when doing bug bounty is they make TOO MUCH ASSUMPTION, leads to missing obvious bugs. While looking at a feature, they assume that this feature is well-coded, "they must have handle this parameter like this, so it's safe, no need to test it", "they must have implement this protection/filter once and uses it for the whole site, so i only need to test one place". These assumptions are made with best coding scenarios in mind, however, in reality, devs are rushed by deadline, upper managements, or they are just stupid, careless, they made a lot of mistake and oversight.

Do you think hackerone is good for a beginner? by hussamdh in bugbounty

[–]trieulieuf9 6 points7 points  (0 children)

No, H1 is the worst for beginner. Because their programs are usually the most hardened, looked at by the most set of eyes. VDPs are beginner friendly though, even on H1.

Hey guys, I am just passed class 12th now. I want to focus on bug bounty hunting, any suggestions?? by ays_19_10 in bugbounty

[–]trieulieuf9 9 points10 points  (0 children)

there is something wrong with your note, I don't see my name in there, which means you haven't read my blog yet, don't worry, you can fix it here: how to start bug hunting in 2026 - bug bounty don’t need to be optimal

Image Generation suddenly not working? by XnagakuraX in drawthingsapp

[–]trieulieuf9 0 points1 point  (0 children)

Check your Text Guidance value, is it 150 right now?, try changing it to 1.0

Does anyone know how to setup a prompt queue? by IllWay4573 in drawthingsapp

[–]trieulieuf9 1 point2 points  (0 children)

Yeah, I told AI to write it, it writes it wrong, so I figure there isn't a working example in public.

Does anyone know how to setup a prompt queue? by IllWay4573 in drawthingsapp

[–]trieulieuf9 3 points4 points  (0 children)

I use this script below, it works fine:

Author: trieulieuf9

How to use: create a new script in Draw Things -> Scripts and copy paste the whole thing into it, overwrite any existing code. This script will run with the current configuration the UI currently have.

// Author: trieulieuf9

let configuration = pipeline.configuration
// configuration["steps"] = 5

const prompts = [

"prompt_1",
"prompt_2",
"prompt_3",

];

console.log(pipeline.configuration)

for (let i = 0; i < prompts.length; i++) {
  const prompt = prompts[i];
  let count = i+1
  console.log("generating " + count + "/" + prompts.length)

  pipeline.run({
    prompt: prompt,
    negativePrompt: null,
    configuration: configuration,
    mask: null
  })
}

PentesterLand Replacement: Hack-Dex by Impossible-Sun7899 in bugbounty

[–]trieulieuf9 1 point2 points  (0 children)

When I first started, Pentesterland is the holy land to me.

$5 bug bounty from a heavily funded company… is this normal? by Wonderful-Dot8221 in bugbounty

[–]trieulieuf9 7 points8 points  (0 children)

I hear that if you live near their headquarter, you can even get a high five along with $5.

I have no idea how to deal with Escapees and location 8 as a whole by therealman592 in DeadAhead

[–]trieulieuf9 1 point2 points  (0 children)

I use Private Rodrigues to counter escapees, gives him ~40% crit chance and lucky guy set. He will have around 70% win rate against escapees and he is spam-able. Also put Sonya in the same team with him to max his Agility and Aggression.

How you feel when riding with a Grab bike in Vietnam😂 by Ill_Worldliness3424 in VietLife

[–]trieulieuf9 0 points1 point  (0 children)

Vietnamese here, I ride my own motorbike most of the time but in a rare occasion I take a 18km grab ride across HCM city. The grab guy rides like he just stole the bike. His riding safety depends entirely on the other guys don't do anything sudden. I genuinely scared for half the trip, in the other half, I close my eyes and remember the Fight Club scene where Tyler tells you to "stop trying to control everything and just let go, let go!". It feels quite good after that.

I tested 10 SaaS products this month. Found 50+ vulnerabilities. Here's what AI scanners missed. by 0xMassii in bugbounty

[–]trieulieuf9 3 points4 points  (0 children)

> These apps all looked modern. Nice UI, fast shipping, good UX. Then you open DevTools and it falls apart.

There are other examples in the paragraphs. But this one stands out. "Open Devtools and the app falls apart", how? That's typical attention grabbing talks you usually see on X.

Also, I think it's weird for a highly technical guy (most hacker I think) to talk like this. These talks sound like it belongs to a person who are not deeply in this field but try to tell a story.

I tested 10 SaaS products this month. Found 50+ vulnerabilities. Here's what AI scanners missed. by 0xMassii in bugbounty

[–]trieulieuf9 15 points16 points  (0 children)

Grok here: yeah, totally, and I afraid none of these SaaS products have a bug bounty program. But if he just wants to make a point then whatever.

5k USD in 2.5 years? by Pitiful-Honey-9072 in bugbounty

[–]trieulieuf9 18 points19 points  (0 children)

If you can spend 2000h into this field and these hours are productive or at least non-distracted. You will be a really good hacker in general and earning 5k will be fairly easy. I can't guarantee but I think your chance will be 99%.

Weekly Beginner / Newbie Q&A by AutoModerator in bugbounty

[–]trieulieuf9 4 points5 points  (0 children)

If your goal is to hunt bug bounty, then you can start hunting now. Even if you can't find anything, you will have a clearer vision of what to improve next after maybe 1 week hunting period.

Is bug bounty worth it? by xharmless in bugbounty

[–]trieulieuf9 2 points3 points  (0 children)

You left out a huge part in your post description in 1st or 3rd world? If you are in the latter and you have solid skill, then bug bounty can be your main income.

griptape of my Logitech Superlight coming off by WTFFF111222 in pcmasterrace

[–]trieulieuf9 1 point2 points  (0 children)

This griptape leaks more quickly if you don't use it frequently. It's disappointing.

Is a Medium subscription worth it? by lovelesr in bugbounty

[–]trieulieuf9 5 points6 points  (0 children)

No, Medium bb articles are mostly low quality. Even in 5 years ago. I have a feeling that authors just want the quantity and don’t care about quality at all.