LoganSec

Bug bounty hunter.

Documenting the journey from $0 → $10,000 in bounties.

YouTube: LoganSec.

[LoganSec @LoganOpSec]

Day 72 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 7
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 1 HOUR

Spent today looking through some subdomains on a VDP.

Not gonna lie, I was really just being nosy and seeing what I could find lol.

Nothing to report, but it was fun exploring.

#bugbounty

[LoganSec @LoganOpSec]

@mcelxhi Patience + Persistence

[LoganSec @LoganOpSec]

Day 71 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 7
🟣 New: 4
💰 Paid: $1,900 / $10,000

Finally sent my AI hackbot out to do some actual work today.

And... it failed HORRIBLY lol.

But that's part of building something from scratch.

Tomorrow we debug, figure out what went wrong, and try again!

#BugBounty

[LoganSec @LoganOpSec]

@Lamka_Labs I'm going to be traveling and I think macbook is best for travel.

[LoganSec @LoganOpSec]

Day 70 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 7
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 1 HOUR

Currently setting up a VM on my MacBook.

Getting ready to make the switch from Windows to Mac for my bug bounty hunting.

Gonna take some getting used to, but I'm excited to try something different!

#bugbounty

[LoganSec @LoganOpSec]

@Jsdijk $$$

[LoganSec @LoganOpSec]

Day 69 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 6
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 2 HOURS

Decided to go back and rebuild my AI hackbot from scratch.

Been spending more time learning and experimenting with automation lately, and I'm really enjoying it.

Shoutout to Jason Haddix for the inspiration!

#bugbounty

[LoganSec @LoganOpSec]

@fishy0x I haven’t, there is probably a big learning curve.

[LoganSec @LoganOpSec]

Day 68 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 6
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 1 HOUR

Got another hour of hunting in today.

Nothing new to report.

#bugbounty

[LoganSec @LoganOpSec]

@p0psec @intigriti Congrats!

[LoganSec @LoganOpSec]

@WhiteKanek55414 I don't know dude, Some of mine I've been waiting months for a first response.

[LoganSec @LoganOpSec]

Day 67 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 7
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 1 HOUR

Hunted for an hour today.

Nothing to show for it, and honestly not much to say either.

Some days are just like that.

#bugbounty

[LoganSec @LoganOpSec]

@EliotGeo I really don't know

[LoganSec @LoganOpSec]

Day 66 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 6
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 2 HOURS

Spent most of today's session just messing around with some AI stuff.

Nothing to report, really just experimenting and seeing what I can learn.

#bugbounty

[LoganSec @LoganOpSec]

@ballx__ yeah

[LoganSec @LoganOpSec]

@hamidonsolo I'd be down

[LoganSec @LoganOpSec]

Day 65 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 0
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 7
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 0 HOURS

Not gonna lie, I don’t know what’s going on.

Spent the entire day thinking I should go hunt, but just couldn’t bring myself to do it.

Maybe it’s a sign I should spend some time learning again instead of forcing myself to hunt.

We’ll see.

#bugbounty

[LoganSec @LoganOpSec]

@HashlightETH Thanks 🙏

[LoganSec @LoganOpSec]

Day 64 of documenting the road to $10K in bug bounty.

📥 Reports Submitted: 1
🟡 Triaged: 8
🔵 Pending Review: 1
⚪ Informative: 6
🟣 New: 4
💰 Paid: $1,900 / $10,000
💻 Hunted: 2 HOURS

Reported the IDOR I found on Epic Games yesterday.

Unfortunately, it got closed as a duplicate of an informative report.

But I'm actually pretty happy with today.

I knew the impact was low, but HOW I found the bug taught me a lot.

Definitely going to implement that methodology into my future hunting.

No bounty, but I consider today a big win.

#bugbounty

[LoganSec @LoganOpSec]

@T3PO0 Yeah, it had a little bit of confidentiality but not a lot.

[LoganSec @LoganOpSec]

I found an IDOR on Epic Games.

The difference between a 403 and a 200? One letter.

Just dropped a video breaking down the full story and my thought process behind the find.

Already at 2.1K views in 5 hours 🤯

https://t.co/fSJDHJOnbB

[LoganSec @LoganOpSec]

@Retro4Hack Facts, thanks bro 😎