I spent the entire day mapping out assets and their functionalities but towards the end, I noticed something, I got an invite, to a fresh recently created program, but this does not satisfy our “Quality Scope” part of the formula because the scope is really small, but that’s not something I’m willing to let stop me. What does this mean? I’ll have to drop the VDP I’ve been working on and focus on this new program. Not only that but someone manually invited me, if by any chance that person is reading this right now, thank you, I appreciate the opportunity. The question now is, did I waste my time today? mapping out assets only to not hack on them? no, not at all, I still have my notes, I can always pick up from where I left off, this is another reason as to why taking notes is important.
The plan for tomorrow is to run my recon automation on this new program and while that’s running, I’ll be writing the reports for the vulnerabilities I’ve found. I guess there’s not much to report on specifically as a lesson, I’m just here to account for the day, nothing interesting(other than the private invite) has happened. I’m really excited about what’s to come, so stay tuned :)
Thank you for taking the time to read through my post. Take care.
For updates — Twitter: https://twitter.com/wallotry/
To send me private program invites — HackerOne: https://hackerone.com/wallotry