Bug Bounty Reports Discussed
The secret to finding many Criticals - Alex Chapman
Jun 25, 2024
Alex Chapman, a bug bounty hunter known for finding high-impact bugs, shares tips on source code review, writing bug bounty reports, finding bugs in desktop apps, and the life of a full-time bug bounty hunter. He discusses his unique hacking style, exploiting CI/CD pipelines, manual hacking approach, investigating functionality issues, bug bounty reporting strategies, exploring JavaScript quirks, and future hacking plans.
01:16:33
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Chapman excels in finding critical bugs by exploring complex system interactions, despite being described as a 'bad web hacker.'
- Chapman's approach involves running basic commands to verify exploitability of RCE bugs, even in medium-severity cases related to Lambda serverless environments.
Deep dives
Alex Chapman's Transition into Bug Bounty Hunting
Alex Chapman, a bug bounty hunter, discusses his transition from pen testing to bug bounty hunting, focusing on finding critical vulnerabilities. Despite his description as a 'bad web hacker,' Chapman excels in discovering critical bugs by exploring complex system interactions.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
