In my experience they are usually found after finding something weird by acciden... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

sureglymop on Jan 26, 2024 | parent | context | favorite | on: Rook to XSS: How I hacked chess.com with a rookie ...

In my experience they are usually found after finding something weird by accident. Then the real challenge is to exploit that flaw (in this case with the text editor).

fuomag9 on Jan 26, 2024 [–]

I can confirm this, I've found a lot of stuff by accident during my years doing bug bounty

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact