Cloud Security Podcast by Google
EP253 The Craft of Cloud Bug Hunting: Writing Winning Reports and Secrets from a VRP Champion
This episode isn’t summarized yet
Create a free account and summarize it. In a few minutes you’ll have the key takeaways and a section-by-section summary.
Show notes
Guests:
- Sivanesh Ashok, bug bounty hunter
- Sreeram KL, bug bounty hunter
Topics:
- We hear from the Cloud VRP team that you write excellent bugbounty reports - is there any advice you'd give to other researchers when they write reports?
- You are one of Cloud VRP's top researchers and won the MVH (most valuable hacker) award at their event in June - what do you think makes you so successful at finding issues?
- What is a Bugswat?
- What do you find most enjoyable and least enjoyable about the VRP?
- What is the single best piece of advice you'd give an aspiring cloud bug hunter today?
Resources:
- EP220 Big Rewards for Cloud Security: Exploring the Google VRP
- Cloud Vulnerability Reward Program Rules
- Insights from BugSWAT
- Google Cloud's Vulnerability Reward Program
- Critical Thinking Podcast