Pablo García Perez - Bug Bounty Hunter using Burp Suite Professional - Port Swigger

Summary: Pablo García Perez, Head of Finance at Wayra - Telefónica's global technological innovation hub, has earned numerous bug bounties in his first two years as a self-described "non-technical" ethical hacker using Burp Suite Professional. His first paid bounty was $300 for an open redirect vulnerability, found after a streaming platform's invitation-only bug bounty program refused his report and he turned to public programs with Chrome DevTools and then Burp Suite.
Why it matters: Pablo credits his financial auditing background for his success, noting that many vulnerabilities rely on understanding the business processes behind an application - a reminder that the people who know how your processes work may spot the flaws your security tools miss.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026