Topic
What vulnerabilities that most dont go after ?
Archived. These forums are read-only. The conversation continues on Discord.
My question is what is the vulnerabilities that the crowd don't go after and would rather go after the "Easier" ones that are saturated with so much competition. What vulnerabilities do you think are the crowd don't go for in the bug bounty world because they are harder, or they think they are dead ?
Not sure that I've come across any data to directly answer your question, so I'd be curious to see some, but I have run across this from HackerOne (attached).
This image represents Year-Over-Year growth of the top ten vulnerabilities disclosed on their platform.
Source: https://www.hackerone.com/hacker-powered-security-report
Interesting, thank you.
Former member