What do you check for when doing a bug bounty?

SPC(P) Private RallyPoint Member — Wed, 04 May 2016 09:30:56 -0400

I'm fairly new to bug bounties, but I was reading an article about a 10 year old finding a vulnerability in Instagram and facebook paid him $10,000 for his find. What do you check for and tools do you use for site analysis? https://hackerone.com is a good site to check out

HackerOne: Vulnerability Coordination and Bug Bounty Platform

HackerOne provides a platform designed to streamline vulnerability coordination and bug bounty program by enlisting hackers to improve your security.

Response by 1stSgt Private RallyPoint Member made May 4 at 2016 9:37 AM

1stSgt Private RallyPoint Member — Wed, 04 May 2016 09:37:10 -0400

Most certainly not in my wheel house of skills. How does this hackerone site work? I would think companies would prefer not to have people trying to reverse engineer their products to find glitches.

Response by SN Greg Wright made May 5 at 2016 8:28 PM

SN Greg Wright — Thu, 05 May 2016 20:28:08 -0400

Gonna tag in SGT Private RallyPoint Member. Pretty sure he'd be interested in this.