Bug Bounty Reports Discussed cover image

Bug Bounty Reports Discussed

Going full-time bug bounty, privilege escalation bugs and more with Douglas Day

Aug 15, 2024
Douglas Day, a former professional turned full-time bug bounty hunter, shares his journey and innovative bug hunting methodology. He discusses the financial and personal sacrifices involved in making this transition. Listeners will be intrigued by his informal note-taking strategies and the organized approach to privilege escalation testing. Douglas also emphasizes the power of collaboration in hacking, revealing how teamwork can enhance vulnerability discovery. With insights on automation and UUID vulnerabilities, his tips are invaluable for anyone in the cybersecurity space.
01:31:16

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

  • Douglas Day transitioned to full-time bug bounty hunting after financially preparing for years, demonstrating the importance of planning before making significant career changes.
  • His focus on specific vulnerability types like privilege escalation highlights the need for targeted strategies in effectively identifying and resolving security risks.

Deep dives

Douglas Day's Journey into Bug Bounties

Douglas Day began his bug bounty journey in October 2018 while working at New Relic, a company with a HackerOne program. Initially, he was tasked with triaging reports from external hackers and quickly became intrigued by the real-world vulnerabilities he encountered. After earning his first bounty in December 2018 for a simple rate limit bypass, he realized the potential for substantial income through bug bounties. By 2019, he matched his engineering salary purely through bounty hunting, ultimately leading him to quit his day job in July 2024 to pursue bug bounties full-time.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode