I like bugcrowd.com but there are others.
Source:
over 1 year ago
Depending on what type of cybersecurity you want to do, there’s other ways to set yourself apart as well. Another way I’d get confidence in someone’s abilities is if they’ve made bug bounties on bugcrowd.com or hackerone.com, for example. Even then, at big companies those people still have to go through HR just like everybody else.
Source:
about 2 years ago
CTFs are the suitable choice in your early phases of learning , just keep an eye on ctftime.org and play some CTFs , if you are confident enough of your skills and disagree with the idea of having a pre-vulnreable software/app then you can do bug bounties on platforms like :
Https://Hackerone.com
Https://bugcrowd.com.
Source:
over 2 years ago
Something else that looks great on a resume is bug bounties. There are a number of responsible disclosure websites like HackerOne and BugCrowd where you can find companies willing to either pay or provide thanks for responsibly disclosing security flaws in their products. Look up some tips on bug bounty hunting and if you get lucky you might be able to find something!
Source:
about 3 years ago
Hackerone.com and bugcrowd.com but you need hacking skills.
Source:
about 3 years ago
Finding bugs in the infrastructure of companies. They often have own bug bounty programs and advertise them for example here or here. I use things like Formal Grammar Fuzzing and analyse Program Logic. Also, during university I had the opportunity to get some industry contacts so I also do contracted formal software verification with Hoare Logic for (usually) critical components. When I started my time at…
Source:
over 3 years ago
Check out https://bugcrowd.com and https://hackerone.com For a work in infosec my recommendation would be a little bit of formal education. Assume that in an interview there’ll be some jargon — you need to understand the questions and answer appropriately. Most of the work in infosec is about protecting against attacks, not necessarily pentesting. This said, passion is everything, if you have that, there’s no…
– Source: Hacker News
/
over 3 years ago
Lastly, please don’t run port scans against unauthorized targets. It’s illegal in some countries. Try websites like hackerone.com or bugcrowd.com to find legal targets you’re free to scan.
Source:
over 3 years ago
