Nowadays people are finding bugs with AI, even with 0 knowledge, and getting paid.
So what’s the difference between someone using AI with no knowledge and someone who actually knows cybersecurity?
Both find bugs. Both get paid.
So what really makes the difference?
Today's day was a bit frustrating. I was trying to find a target but was not able to find one. Tried Bugcrowd and HackerOne. On Bugcrowd, I found a good target. I was doing recon, found subdomains, found JavaScript files, and analyzed each file. But when I tried to register on the site, there was no option for an Indian number, so I was not able to explore further. So I quit that target. Really, my time got wasted. So like still I'm confused how to find a good target through the dorking because the platforms like bugcrowd hackerone yeswehack and intigriti are very crowded even VDP programs are also.
Right now I'm learning about different vulnerabilities in web applications and now I'm being stuck on how to find a good target where there is less crowd of hunters Is this from the bugcrowd, hackerone or from the Google dorking if anyone can help me please guide me.