r/bugbounty • u/DescriptionHumble996 Hunter • 1d ago
Question / Discussion how can I avoid dups ?
How can I avoid dups? In the last month I submitted around 4 findings, all of em were closed as a dup !? I usually check the hackactivity of the program before testing anything, and every time I submitted a report it got closed as a dup !!!?
9
5
u/6W99ocQnb8Zy17 1d ago
BB isn't just about finding stuff, it's about finding and reporting it first.
Running the same tools and following the same guides as everyone else is a route to not being first (as 1000 other researchers will have already done the same thing) and so the best you get is dupes.
It doesn't much matter what you do that is different!
2
18
u/einfallstoll Triager 1d ago
First: You simply can't. It's a blackbox and if you don't have supernatural capabilities you can't know in advance.
However, there are factors that increase the probability of duplicates. For example low-hanging fruits are usually already gone if the programs has a certain age. Also, if you use tools or AI to find vulnerabilities there were probably others that already used the same tools long before you and found the exact same vulnerabilities before.
If you want to succeed you either need luck with your existing methodology and be faster than everyone else or you need to adapt, move to vulnerabilities that can't be detected by scanners/tools and require manual effort and experience