Is it just guessing until you get lucky?

When you start with bug bounty, you should do a ton of recon like crazy, your edge usually comes from finding an endpoint before someone else. Recon should takes many days to weeks. I can do that. But my question is? Let's assume you have 100% of the attack surface, is the game all about guessing blindly and the top guesses makes the most money? I feel like to try everything you know and hope that you get lucky against the most target that "feels" vulnerable. I totally respect the profession, but is that it? The 3 bugs i ever found were all like that. Do everything you know and you might hit a jackpot. submitted by /u/No_Neat_4331 [link] [comments]