My First Year in Bug Bounty

Hello everyone, in this writeup I will summarize my first year as a bug bounty hunter working only in Bugcrowd.

My Journey into Bug Bounty Hunting

I started in January 2024. At first, it was very frustrating because the vulnerabilities I reported were either declined or marked as duplicates, largely due to my own inexperience. As the months went by, I shifted my focus to studying vulnerabilities more thoroughly and improving my understanding. I also completed machines on Hack The Box, which was very helpful for learning.

In July, I decided to give bug hunting another try. With more experience and a better understanding of the process, I was finally able to identify and report my first valid bug bounty. Not only was it accepted, but it was also my first paid bug bounty, which greatly motivated me to keep going.

In those months I kept getting valid P4 submissions, until I even got my first P1 bug bounty!

Achievements Summary

Over the course of my first year as a bug bounty hunter, I successfully submitted 43 valid reports, earned 130 points, and accumulated over $1800 in earnings 🥳.

Contact:

https://x.com/cyxbugs