Does AI really take away the skills you need to be a good bug bounty hunter or pentester?
With the rise of AI on everything I am now convinced that you really need a clear understanding of what you are doing in order for AI to work, with exploit chaining where you need multiple attacks, AI will be halucinating. AI does not really understand bug bounty, it can flag something as a vulnerability, mostly because that is from a cve, but that cve would not qualify as a bounty concern, some cves says a nonce can not be exposed or password has to be a certain length and mixed characters, which really dont matter if the authentication is hardened enough. From watching the critical thinking podcast and following some hunters in twitter, one still needs to really understand hacking, spending time hacking blindly with AI seems to be just a circular race. AI can fail to solve a lab or give a working script from a lab solution or a CTF, let along the real target.