►
From YouTube: How Bug Bounty Hunter Alex Chapman streamlines his hack
Description
Alex Chapman, (@ajxchapman on HackerOne) Bug Bounty Hunter contributor to GitLab's HackerOne program, talks about how he efficiently and effectively fits bug bounty hunting in with all of life’s other priorities.
See his full GitLab AMA: https://youtu.be/Km6toD6CAAw.
Check out his "Ask a Hacker" blog: https://about.gitlab.com/blog/2021/03/04/ajxchapman-ask-a-hacker/
Learn more about his approach in our blog post, “How do bug bounty hunters use GitLab to help their hack?“: https://about.gitlab.com/blog/2021/06/11/how-i-use-gitlab-to-help-my-hack/.
Learn more about GitLab security programs at https://about.gitlab.com/security/ and our HackerOne program at https://hackerone.com/gitlab.
A
Before
my
second
daughter
came
along,
I
was,
I
was
able
to
spend
hours
and
hours
in
front
of
the
keyboard
with
it
without
too
many
other
responsibilities
since
science,
since
my
second
order
came
along
and
well
a
month
ago
now
I've
been
having
balance
my
time,
a
lot
more
and
fitting
bug
hunting
in
around
child
care
and
all
the
rest
of
it.
So
some
of
the
biggest
things
and
revelations
for
me
were
note-taking.
A
I
was
terrible
at
note-taking
and
now
I
kind
of
write,
absolutely
everything
down
that
I
can,
even
if
I
don't
think
it's
particularly
useful
at
the
time
it
can
sometimes
spark
something
several
days
later
and
I
can
go
back
and
find
those
notes.
So
I
do
actually
use
git
lab
issue
reporting
for
all
of
my
my
bug,
hunting
notes
so
I'll.
A
If
I
come
across,
something
I
think
might
be
worth
looking
at
I'll
create
a
new
a
new
issue
tag
it
as
a
lead,
write
down
why
I
think
it
might
be
worth
looking
at
in
the
future
and
any
notes
I
can
think
of
at
that
time.
And
then,
if
I'm
interested
in
looking
at
it
there
and
then
I'll.
Just
keep
appending
my
notes
to
that
issue.
A
And
if
it
comes
to
nothing
I'll
tag
it
it's
not
a
bug
or
if
it
comes
to.
If
I
get
a
bug
or
two
out
of
it,
I'll
I'll
link
those
to
new
issues
and
and
write
reports
in
these
new
issues
and
at
the
end
of
each
session,
I
always
make
sure
I
take
five
ten
minutes
to
write
down
any
outstanding
thoughts
and
just
really
try
and
keep
on
top
of
my
thoughts.
A
I
find
get
that
issues
very
useful
as
well,
because
I
can,
when
I
wake
up
in
the
middle
of
the
night,
with
a
spark
of
inspiration.
I
can
just
jump
on
my
phone
at
that
or
append
that
to
to
an
issue
and
then
kind
of
push
it
off
till
morning,
whereas
perhaps
before
I
might
have
got
up
on
and
and
started
working
on
that
that's
not
really
viable.
For
me
these
days.