avatarkerstan

Summary

Kerstan explains how to leverage AI and Nuclei for automated bug hunting to earn money passively through bug bounties.

Abstract

In an article titled "How To Use AI And Nuclei To Make Money While You Sleep — Bug Bounty Tuesday," Kerstan introduces a method for automating the bug bounty process using AI and Nuclei. The article guides readers through setting up a server or cloud instance to run Nuclei on numerous subdomains, optimizing Nuclei configurations for parallel processing, and understanding rate limits. Kerstan emphasizes the importance of using advanced configurations to maximize efficiency and encourages readers to explore further by reading his other articles on related topics. He also offers a cost-effective AI service recommendation for those interested in enhancing their bug bounty endeavors.

Opinions

  • Kerstan values the use of servers or cloud instances for running Nuclei, suggesting it as a preferred approach.
  • He advocates for the effectiveness of Nuclei in scanning a large number of subdomains, indicating its utility in bug bounty hunting.
  • The author recommends adjusting Nuclei settings such as template execution parallelism, host analysis parallelism, and rate limiting to optimize performance.
  • Kerstan appreciates reader support, asking for claps, follows, or contributions via a "buy me a coffee" link.
  • He promotes his other articles as valuable resources for learning more about bug bounty techniques.
  • Kerstan endorses an AI service as a cost-effective alternative to ChatGPT Plus (GPT-4), suggesting it as a tool for readers interested in improving their bug bounty efforts.

How To Use AI And Nuclei To Make Money While You Sleep — Bug Bounty Tuesday

Subscribed to: https://medium.com/@kerstan

Hello everyone, I’m Kerstan.

Today is Bug bounty Tuesday, I will share with you how to use AI and Nuclei to make money while you sleep.

So, let’s dive right in.

Image generated with PaintingForYou

1. Run nuclei

First of all, if you can use a server or any kind of droplet (for Axiom, Hakq or Nuclei Cloud) that would be great!

Use them and run nuclei on a large number of subdomain.

2. Nuclei config

  1. max number of templates to be executed in parallel (-c)
  2. number of hosts to be analyzed in parallel per template (-bs)
  3. rate limit number (-rl)
  • Final command:
nuclei -o output.txt -bs <> -c <> -rl <>

Learn more about nuclei.

If this writing has been helpful to you, please consider giving it a clap and following. Thanks bro.

Alternatively, you can just buy me a coffee here, any sort of support is much appreciated. Enjoy your reading.

If you want to learn more knowledge about Bug Bounty Tuesday, please be sure to take a look at my latest articles.

How To Use AI And Nuclei To Make Money While You Sleep — Bug Bounty Tuesday

3 Step Find Critical Bug In Bug Bounty — Bug Bounty Tuesday

How I Discovering the Origin IP In Bug Bounty — Bug Bounty Tuesday

Account Takeover Through Rate-Limit Bypass — Bug Bounty Tuesday

5 Tips GoogleDocks you should know — Bug Bounty Tuesday

Jenkins Arbitrary File Reading Vulnerability (CVE-2024–23897) — Bug Bounty Tuesday

How I Find Open Redirect Bug — Bug Bounty Tuesday

My SSRF Tricks — Bug Bounty Tuesday

Get IDOR In No Permission To Access Page — Bug Bounty Tuesday

URL Redirection To DOM XSS on Hackerone Programs — Bug Bounty Tuesday

3 Steps Discovered XXE You Should Know

URL Redirection To DOM XSS on Hackerone Programs

How I Discovered SSRF on Hackerone Program

How I Automatically Discovered SSRF on Hackerone Program

PS.

Subscribe Here.

Security
Cybersecurity
Technology
Bug Bounty
Hacking
Recommended from ReadMedium