EP253 The Craft of Cloud Bug Hunting: Writing Winning Reports and Secrets from a VRP Champion

Guests:

• Sivanesh Ashok, bug bounty hunter
• Sreeram KL, bug bounty hunter

Topics:

• We hear from the Cloud VRP team that you write excellent bugbounty reports - is there any advice you'd give to other researchers when they write reports?
• You are one of Cloud VRP's top researchers and won the MVH (most valuable hacker) award at their event in June - what do you think makes you so successful at finding issues?
• What is a Bugswat?
• What do you find most enjoyable and least enjoyable about the VRP?
• What is the single best piece of advice you'd give an aspiring cloud bug hunter today?

Resources:

• EP220 Big Rewards for Cloud Security: Exploring the Google VRP
• Cloud Vulnerability Reward Program Rules
• Insights from BugSWAT
• Google Cloud's Vulnerability Reward Program
• Critical Thinking Podcast