johnk
2021-01-08 09:00:00
www.hackerone.com
@jin0ne is only 20-years-old, and he is already one of the highest performing hackers on the HackerOne platform! He has submitted more than 200 valid vulnerabilities in just one year and taught himself how to hack at the age of 16 after one of the websites he followed was hacked. @jin0ne decided to contact the hacker, and it was that encounter that uncovered the fascinating world of hacking for him. It was a hobby at first, but it quickly turned into a job. Nowadays, @jin0ne says he hacks for about 10 hours a week because he prefers to spend the rest of his time playing League of Legends. Read more about his journey below.
How did you come up with your HackerOne username?
When I started learning web-security, I named myself Jinone, but when I registered it seemed to already exist, so I just used jin0ne.
How did you discover hacking?
One day, a website I frequently browsed was hacked. That person wrote his name on the homepage. I thought it was cool.
What motivates you to hack and why do you hack for good through bug bounties?
Hacking is very challenging and fun at the same time. If you get paid to do it, then it’s even better. HackerOne’s Hall of Fame is also a motivation for me because it provides a sense of accomplishment, and helps others, too.
What makes a program an exciting target?
The bounty and overall visibility of the program.
What keeps you engaged in a program and what makes you disengage?
I like programs that have many assets and are responsive. I don’t like programs that mark reports as information and then fix the vulnerabilities.
How many programs do you focus on at once? Why?
One. This helps me collect more information and understand the program better.
How do you prioritize which vulnerability types to go after based on the program?
In terms of vulnerabilities, I prefer to look at XSS or Server Side Request Forgery (SSRF), as well as some other server-side security issues. I like programs that provide a quick response to a bug submission. I also like programs that offer high bounties.
How do you keep up to date on the latest vulnerability trends?
I use Hacktivity, Twitter and follow several blogs.
What do you wish every company knew before starting a bug bounty program?
How truly important information security and the work of ethical hackers are to their business.
How do you see the bug bounty space evolving over the next 5-10 years?
There will be more and more bounty hunters. There should be more and more bounty programs.
How do you see the future of collaboration on hacking platforms evolving?
There should be more and more hacker collaborations. We should use our skills to help each other.
Do you have a mentor or someone in the community who has inspired you? Don’t be shy, give a shout out!
In the beginning, I was looking at a vulnerability website in China, similar to Hacktivity, which was an inspiration. I also follow a lot of hackers on Twitter, who are all great. I’m also grateful to the teachers I’ve had who have motivated me to be my best.
What educational hacking resources would you recommend to others?
Hacktivity and Portswigger Web Security Academy.
If you had a magic wand and could change one thing on the HackerOne platform, what would it be?
I want to view more reports in order to gain more knowledge and skills.
What advice would you give to the next generation of hackers?
My advice is to learn some basic coding at first and then read relevant blog posts. Keep at it and don’t get frustrated by duplicates.
What do you enjoy doing when you aren’t hacking?
I love playing online games and reading novels.
Keep your files stored safely and securely with the SanDisk 2TB Extreme Portable SSD. With over 69,505 ratings and an impressive 4.6 out of 5 stars, this product has been purchased over 8K+ times in the past month. At only $129.99, this Amazon’s Choice product is a must-have for secure file storage.
Help keep private content private with the included password protection featuring 256-bit AES hardware encryption. Order now for just $129.99 on Amazon!
Help Power Techcratic’s Future – Scan To Support
If Techcratic’s content and insights have helped you, consider giving back by supporting the platform with crypto. Every contribution makes a difference, whether it’s for high-quality content, server maintenance, or future updates. Techcratic is constantly evolving, and your support helps drive that progress.
As a solo operator who wears all the hats, creating content, managing the tech, and running the site, your support allows me to stay focused on delivering valuable resources. Your support keeps everything running smoothly and enables me to continue creating the content you love. I’m deeply grateful for your support, it truly means the world to me! Thank you!
BITCOIN bc1qlszw7elx2qahjwvaryh0tkgg8y68enw30gpvge Scan the QR code with your crypto wallet app |
DOGECOIN D64GwvvYQxFXYyan3oQCrmWfidf6T3JpBA Scan the QR code with your crypto wallet app |
ETHEREUM 0xe9BC980DF3d985730dA827996B43E4A62CCBAA7a Scan the QR code with your crypto wallet app |
Please read the Privacy and Security Disclaimer on how Techcratic handles your support.
Disclaimer: As an Amazon Associate, Techcratic may earn from qualifying purchases.