I know triaging reports is part of your job, bro, but to a researcher on the other side, your time and decisions are part of a much bigger learning experience. Thank you for every report you reviewed. I genuinely miss those days 🐐
@Bugcrowd#Bugcrowd#BugBounty
@Bugcrowd triagers are insanely fast! Assessed 3 reports, built the rig, and validated 10 files in under 3 minutes. Marked not reproducible, but that speed? Just wow!
I wonder how they did that, whatever tech and setup you are using is out of world. ;)
After all those duplicates and a lot of waiting, things finally started paying off. 🫡
$19,550 in bug bounty rewards from September through October.
More to come. 🚀
#bugbounty#Bugcrowd
Bugcrowd needs more triagers like Mason. 🥇
Mason demonstrated what good triage actually looks like: investigate first, reproduce the issue, evaluate the evidence, and make decisions based on technical facts rather than assumptions.
@Bugcrowd@Masonhck3571#bugbounty#Bugcrowd
My biggest bounty so far🥹 Never expected it to be a P1... Thank you, God.. 🙏
Tip: Learned from @Assass1nmarcos report titles... understood the concept with ChatGPT.. then gave my AI a detailed prompt. It found this bug in just 9 hours.. ❤️
#ItTakesACrowd
@Sec_BlackBeard@Masonhck3571@Bugcrowd Huge respect to @Masonhck3571 👏 We hope more @Bugcrowd triagers adopt this level of transparency and clear communication when handling reports. Researchers deserve to understand the technical reasoning behind every decision :) 💯
@Sec_BlackBeard@Masonhck3571@Bugcrowd Huge respect to @Masonhck3571 👏 We hope more @Bugcrowd triagers adopt this level of transparency and clear communication when handling reports. Researchers deserve to understand the technical reasoning behind every decision :) 💯
This is what good triage looks like! Huge respect to Mason357_Bugcrowd. @Masonhck3571
A duplicate decision with a clear technical explanation, showing exactly what overlaps with the previous report and why the same fix addresses both findings.
More of this
@Bugcrowd#bugbounty
@luq0xd i guess bugcrowd nowadays just dup any reports reported at the same day lol
i'll not be suprised if the dup was belong to another BB program :D
If you are wanting to get into bug bounty hunting... goto hackerone... fuck bugcrowd. They marked a request as duplicate, I asked if it was ok for me to disclose publicly then, and they responded by banning me for 30 days LOL
@Bugcrowd I opened 6 or 7 bugs in these days, some are p1 and p2. All marked as "Not Applicable". Triagers saying there are not enough proofs, when I have uploaded full .zip files. Are you kidding? Worst bb platform ever!
@_jensec@Bugcrowd Same experience here with @Bugcrowd. A report sat in the queue for 2 months, then got closed as a false positive because the retest skipped the key step. If you don’t follow the steps, of course it won’t reproduce. That’s not a false positive.