HackerOne Reviews and details

Social recommendations and mentions

• CSA: Be careful with NEW Firefox add-ons over long weekends

  Mozilla has a great security team and they have recently moved to HackerOne https://hackerone.com/. I don't understand where you get the basis for saying that mozilla employees don't work on weekends. Any facts or substantiation or just speculation? Source: 11 months ago

• Blazingly fast tool to grab screenshots of your domain list from terminal.

  You pick a target, for example hackerone.com. Source: about 1 year ago

• Advice for a Software Engineer

  There are many resources online nowadays to learn security. You can do challenges on https://root-me.org, https://www.hackthebox.com/, https://overthewire.org/wargames/, etc. You can participate in security competitions (CTFs), see https://ctftime.org for a list of upcoming events. And finally if you are more interested in web security you can look for bugs on websites and get paid for it by https://hackerone.com... Source: about 1 year ago

• itplrequest: how can i go about hacking for money?

  Do Bug bounty on https://hackerone.com. You'll get paid if you really know how to hack and write a report.alot oh cash rains in the thousands if you can pwn a computer that is in scope .plus its legal as long as you stay in scope. Source: about 1 year ago

• About to apply

  Depending on what type of cybersecurity you want to do, there's other ways to set yourself apart as well. Another way I'd get confidence in someone's abilities is if they've made bug bounties on bugcrowd.com or hackerone.com, for example. Even then, at big companies those people still have to go through HR just like everybody else. Source: over 1 year ago

• [AMA] I've found D/DoS flaws in 20+ blockchains - ask me anything

  Haha nah. Immunefi is essentially the https://hackerone.com of crypto that's all. Source: about 2 years ago

• [AMA] I've found D/DoS flaws in 20+ blockchains - ask me anything

  Often in the world of bug bounties exploits are marked as previously known issues when they probably aren't. As far as people being sued for hacking, it is unlikely that they had permission from a collaborative program such as you would see on https://hackerone.com. Source: about 2 years ago

• 5 Side Gig Options for Programmers & Developers

  They do this by setting up bounty programs where individual programmers get paid to find hidden problems. Websites like HackerOne and Bugcrowd regularly have opportunities to make money doing this. - Source: dev.to / about 2 years ago

• I am a part of the Anonymous Hacker Group, AMA

  Yeah. Sometimes I like to try and find vulnerabilities on companies using https://hackerone.com to try and earn some money. Source: about 2 years ago

• How I hacked Hearthstone

  Huge thanks to the yangyuan and guys from HearthSim community for making it all possible: jleclanche for introducing me to HackerOne bug bounty program, Patashu for making Combo Priest Simulator among other things, and the whole community for their dedication to finding Hearthstone bugs and writing amazing stuff like Advanced rulebook! Source: about 2 years ago

• Do pentesters use OWASP techniques and do web app bug bounty hunters use pentesting techniques?

  I'm new to this and I started learning about bug bounties last year with hackerone.com and portswigger.net. Now I'm shifting gears and learning about pentesting on tryhackme.com and in the future hackthebox.eu. It looks like bug bounty hunters usually work on a platform like hackerone and get paid per each finding and how severe it is; and pentesters can find work on Linkedin like a contractor and get paid for... Source: about 2 years ago

• VALORANT 3.06 Bug Megathread

  Hackerone.com its up to 100k for exploit on vanguard now. Source: over 2 years ago

• How do I transition to a security role?

  Something else that looks great on a resume is bug bounties. There are a number of responsible disclosure websites like HackerOne and BugCrowd where you can find companies willing to either pay or provide thanks for responsibly disclosing security flaws in their products. Look up some tips on bug bounty hunting and if you get lucky you might be able to find something! Source: over 2 years ago

• Cyber Security Certification in Algeria

  Hackerone.com and bugcrowd.com but you need hacking skills. Source: almost 3 years ago

• Ask HN: I want to start legally hacking, help?

  Check out https://bugcrowd.com and https://hackerone.com For a work in infosec my recommendation would be a little bit of formal education. Assume that in an interview there'll be some jargon -- you need to understand the questions and answer appropriately. Most of the work in infosec is about protecting against attacks, not necessarily pentesting. This said, passion is everything, if you have that, there's no... - Source: Hacker News / about 3 years ago

• Software Engineer, Security in San Francisco, CA (remote or on-site)(full-time)

  Assist in maintaining bug bounty program hosted on hackerone by directly engaging security researchers and awarding bounties. Source: about 3 years ago

• Port Scanning question

  Lastly, please don't run port scans against unauthorized targets. It's illegal in some countries. Try websites like hackerone.com or bugcrowd.com to find legal targets you're free to scan. Source: about 3 years ago