Marius du Preez

Bug bounty hunter breaking Web2 apps, APIs & business logic. $83k in my first 5 months. Sharing what works and doesn't. 🇦🇺

[Marius du Preez @mdp_sec]

I earned $83,088 from bug bounties in my first 151 days.

203 reports since my first submission on 20 February.

That is the headline. It is also the least interesting part of the story.

Here is what actually happens between finding a bug and getting paid.

[Marius du Preez @mdp_sec]

@wgujjer11 @Bugcrowd Gratz

[Marius du Preez @mdp_sec]

@fattselimi happens so often why I do vids with everything I do now as timestamp and proof, has helped a few times so worth doing it

[Marius du Preez @mdp_sec]

I started chasing rabbit holes to understand how systems break.

The reports got sharper. The payouts got bigger.

Curiosity is the workflow.

[Marius du Preez @mdp_sec]

@Raman_Mohurle @Bugcrowd I have some 3+ months still pending final rewards. Brutally slow

[Marius du Preez @mdp_sec]

@galnagli @wiz_io @wizredagent Oooft thats some good scanning numbers

[Marius du Preez @mdp_sec]

@rootsud0 I prefer older programs where you see only 1 or 2 reports a month's. Them be where golden nuggets hide

[Marius du Preez @mdp_sec]

@SauravTxt Pretty much the normal

[Marius du Preez @mdp_sec]

@ich_rish99 Token limit

[Marius du Preez @mdp_sec]

@_xpn_ Im sure safety cranked all the way to max. Just mention the word bug and bam fallback to haiku

[Marius du Preez @mdp_sec]

@ah20im friday?

[Marius du Preez @mdp_sec]

@zhero___ can relate on this for sure, or they put you on a tier 3 target vs a tier 1 with potato payment... but best one I have had is submit report, they change scope and report is forced under new scope.. what a rofl that is

[Marius du Preez @mdp_sec]

@jsnnsa rofl

[Marius du Preez @mdp_sec]

@ritvij14_ @AnthropicAI

[Marius du Preez @mdp_sec]

@rootsud0 seen this multiple times its rofl

[Marius du Preez @mdp_sec]

@fattselimi @badcrack3r @intigriti banger

[Marius du Preez @mdp_sec]

@0xatharv @Bugcrowd feels legit but so random some days it makes no sense, like it is just filtering keywords

[Marius du Preez @mdp_sec]

@souravpaul_01 @Bugcrowd vids have saved me so many times

[Marius du Preez @mdp_sec]

@_kujen5 @Bugcrowd First accepted is still a win

[Marius du Preez @mdp_sec]

@scottew and still companies would rather fund a ping pong table than pay hunters properly...

[Marius du Preez @mdp_sec]

Here is what your money actually buys in tokens.

Cursor (Grok 4.5): 2.6B/month, $60/mo
Grok (SuperHeavy 4.5): 1.5B/week, $100/mo

Both at $200/mo:
OpenAI 20x Pro: 3B/week
Claude 20x Opus: 1B/week