YESWEHACK PROPHILE ON ZAX

June 14, 2021

Article hero image
1
2
3┌▄──────────────────────────────────────────────────────────────────────▄┐
4├■▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀■[ YESWEHACK PROPHILE ON ZaX ]■▄▀▄▀▄▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄┤
5├■──────────────────────────────────────────────────────────────────────■┤
6├■▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀■┤
7└▀──────────────────────────────────────────────────────────────────────▀┘
823th of May, 2021.
9╔══════════════════════════════════ WHOIS ═══════════════════════════════╗
10Handle: ZaX
11AKA: Brice Augras
12Age of your body: 30
13Produced in: FR
14Urlz: https://bzhunt.fr
15Computers: Buying i9 NUCs too often :D
16Active Since: 2017
17Superpowers: Deserialization
18Life in a sentence: Forget you don't know and keep learning ║
19╚════════════════════════════════════════════════════════════════════════╝
20
21 QUOTES
22╔════════════════════════════════════════════════════════════════════════╗
23"Did I read the manual ? #RTFM"
24"Sharing is caring"
25╚════════════════════════════════════════════════════════════════════════╝
26
27 ARMORY
28╔════════════════════════════════════════════════════════════════════════╗
29Hunting with @doomer ║
30BurpSuite Pro
31Nuclei
32Ysoserial <3, AspDotNetWrapper
33╚════════════════════════════════════════════════════════════════════════╝
34
35
36▀▄█▓▒░ Hello, who are you?
37│ ─────────────────────────────────────────────────────────────────────────
38└─ Hi, I'm Brice Augras, founder of BZHunt company & Infosec Researcher.
39I had the chance to grow with computers, Internet and all this kind of juicy
40stuff :)
41
42
43▀▄█▓▒░ Can you relate your first successful exploitation/abuse of a system?
44│ ─────────────────────────────────────────────────────────────────────────
45└─ When I was like 15 years old, I had quite severe restrictions at home
46regarding allowed time to spent on the Internet (thxs Dad). I needed to find
47a way to circumvent the restriction and thanks to Google, I discovered that
48it was possible to "crack" WI-FI WEP encryption key of my neighbour (shame
49on me, completely illegal).
50
5115 years later (and after raising a true ethical approach regarding infosec),
52this memory is still the strongest one since that was the first time I put a
53feet inside "hacking" field. From there, I kept discovering the wild world of
54IT, coding and pwning. I literally love the mindset behind hacking :)
55
56
57▀▄█▓▒░ What moment pushed you in the pro computer security whirlpool?
58│ ─────────────────────────────────────────────────────────────────────────
59└─ A little bit of chance, a lot of RNG but overall a lot of time spent
60learning and improving my technical skills since I didn't had any diploma.
61To be honest, I struggled quite a lot 6 years back while trying to find a job.
62So, seeing where I am right now is like the biggest gift I could have offered
63myself.
64
65
66▀▄█▓▒░ Memorable people or readings you care to share about?
67│ ─────────────────────────────────────────────────────────────────────────
68└─ All the hunters publishing #DeutscheQualitat write-ups on online platforms
69& open-source tools.
70
71
72▀▄█▓▒░ What will you learn next?
73│ ─────────────────────────────────────────────────────────────────────────
74└─ To-Do list is quite big but one of my favorite topic would be : Blockchains
75attack scenarios.
76
77
78▀▄█▓▒░ Three most important rules you would write in a Bug Hunter Manifesto?
79│ ─────────────────────────────────────────────────────────────────────────
80└─ Eat, Pwn, Sleep, Repeat.
81Be careful with impostor syndrome and burnouts and never forget to enjoy ;)
82
83
84▀▄█▓▒░ You are active on YesWeHack and have practiced others BB platforms,
85| What are your Do/Don't?
86| What are your expectations ?
87│ ─────────────────────────────────────────────────────────────────────────
88└─ Building a long term relationship with the customers. Enjoying programs
89with a lot of activity.
90
91
92▀▄█▓▒░ What advice can you give to someone who wants to start in
93│ bug bounty?
94│ ─────────────────────────────────────────────────────────────────────────
95└─ Don't be afraid and "JUSTT DOOO ITTTT". I was literraly impressed 3-4 years
96ago, doubting about my ability to find even one valid vulnerability. For the
97newcomers, I would just say : "start digging with only one kind of target or
98vulnerability and keep increasing your knowledge about it. You'll rapidly
99notice that this will end up working and success will come!"
100
101
102▀▄█▓▒░ Is there a life AFK?
103│ ─────────────────────────────────────────────────────────────────────────
104└─ Fixing old sports car & house renovation. A bit crazy since I almost lost
105a finger with this kind of activity (keyboard with 9 fingers, less practical
106haha)...
107
108
109▀▄█▓▒░ How do you see the future?
110│ ─────────────────────────────────────────────────────────────────────────
111└─ Cybersecurity needs from the companies will keep increasing for sure for
112the incoming years. Can't wait to see how infosec stuff will evolve on topics
113such as AI, Blockchain, Smart Cities. I would take the bet that we'll discover
114new attack vectors.
115
116--------[ EOF
117
118