Q&A with the ambassador

I came to bug hunting through a love of infosec. What could be better than legally breaking into various large companies that differ in their technological and business stacks, and getting paid for it. At first there were CTF competitions, school olympiads — simple web tasks and forensics — after several successful competitions I wanted to try real applications.

The most memorable — the logic in company N, which allowed blocking any account via several endpoints in different services, connected into one network.

I try to devote 10 hours per week, but often I cannot allocate that much time.

Basic set: Burp Suite, dirsearch, Nmap, a modernized sqlmap, endpoints, I am trying to introduce AI agents into BB.