I'm a security engineer by day and [hacker](https://hackerone.com/d0nut) by night! I spend my time playing games, writing new tools, hacking, and occasionally making music. # [Twitter](https://twitter.com/d0nutptr) # [Youtube](https://www.youtube.com/d0nutptr) # [Medium](https://medium.com/@d0nut) # [Instagram](https://www.instagram.com/insta.d0nut/)

# How old are you? 27 # How do I get started in bug bounties? I don't really know a good answer to this; I think the answer is different for everyone. There do exist a TON of resources for people of all kinds of skill levels already. Here are some recommended resources if you need help getting started: * [Nahamsec](https://twitter.com/nahamsec)'s [Resources for Beginner Bug Bounty Hunters](https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters) * [HackerOne](https://twitter.com/hacker0x01)'s [Hacker101](https://www.hacker101.com/) platform * [Stok](https://twitter.com/stokfredrik)'s [HOW TO GET STARTED IN BUG BOUNTY](https://medium.com/@stokochtrubbel/how-to-get-started-in-bug-bounty-9-pro-tips-69c13f3c74c6) blog post * [Bugcrowd](https://twitter.com/bugcrowd)'s [Getting Started: Bug Bounty Hunter Methodology](https://www.bugcrowd.com/blog/getting-started-bug-bounty-hunter-methodology/) # What kinds of bugs do you normally look for? Uhh usually XSS, various types of information disclosure, CSRF, CORS issues, and SSRF. I look for other stuff too, of course, but this is the stuff I most frequently look at. # Aren't you worried about DMCA for the Crab Rave stream intro? I purchased a license from Monster Cat so we're all good :) # What games do you play? I play the following very regularly: 1. League of Legends 2. CS:GO 3. Rust

Donations help me give back to the community, improve my content, and spend more time on projects relevant to streaming, youtube, and general writeups! No required, but always appreciated.

You can find me in [nahamsec's discord](https://discord.gg/mbCJbmN) This is where I'll be chilling to answer questions about bug hunting and security :)