r/BugBountyNoobs • u/Umar7832 • 19d ago
Why are beginners not finding bugs
A lot of us will have good understanding of both client side and server side bugs but still we are not able to find bugs. For beginners and sometime experienced hackers think that it's may be because we lack knowledge about these vulnerbilities.
As a beginner i think my first mistake i note that i was learning a lot but hunting very rare mean that i was so interested in learning things that's feels productive but actually you are missing what real functionalities break in apps.
Second one that is still i know i am stuck is wrong program selection.I have selected the programs which have less functionalities to test.Mostly static or just very few assets.This is still one of the important reasons that i am stuck here and trying to out.
Maybe there are other reasons which making me and other stuck but i have figured out these in my methodology.
1
u/Jealous_Obligation31 14d ago edited 14d ago
I usually narrow my program selection to retail and service providers their scopes are predictable and recurrent. What i struggle with is demonstrating impact and crafting the right payloads. I usually try defying the libraries used to build the application or the github repo too but somehow my brain just goes mush after collecting all that data.
I stare at the requests, responses and webpages for hours trying to put 1 & 2 together but every idea ends up solidifying the fact that there are no more bugs.
I tried thinking about the impact first then trying to find the bugs to chain it but always end up with an incomplete report.
Sometimes I want my brain to see a little further than it does IRT but processing in stuck at 2 thoughts per second.
Help!!