Browse Category

Bug Bounty

Learn how to set up your own VPN using WireGuard on a VPS — step-by-step! Perfect for bug bounty hunters, privacy advocates, and cybersecurity beginners.

How to Set Up Your Own WireGuard VPN on a VPS (Beginner-Friendly Tutorial)

If you’re concerned about online privacy, need to rotate your IP address for bug bounty work, or simply want a fast, secure, and cost-effective VPN you fully control — then setting up your own WireGuard VPN server is a fantastic solution.

In this tutorial, I walk you step-by-step through setting up WireGuard on a VPS (I used DigitalOcean, but any cloud provider will do). This guide is perfect for beginners — whether you’re an aspiring ethical hacker or just looking to get more out of your internet connection.

What You’ll Learn

  • Creating a VPS using DigitalOcean Droplets
  • Installing WireGuard and supporting tools like qrencode, resolvconf, and configuring ufw
  • Generating server and client keys
  • Setting up a full VPN configuration
  • Enabling IP forwarding and firewall rules
  • Creating and importing the client configuration (tested on macOS)
  • Generate a QR code to connect from your phone (tested on iPhone)

Why WireGuard?

WireGuard is a modern, lightweight, and highly secure VPN protocol that outperforms traditional solutions like OpenVPN. It’s perfect for personal use and professional testing alike.

Watch the Full Video Tutorial

URL: https://youtu.be/p2a7wdvtnwg

Resources Mentioned

Final Thoughts

This guide gives you everything you need to host your own private VPN — no bloated software, no data-sharing policies, and total control over your setup. If you’re into bug bounty hunting or CTFs, this setup gives you the flexibility to rotate IPs and connect securely from anywhere.

A step-by-step guide to setting up Kali Linux using Docker. Includes custom image creation, file sharing, and beginner-friendly tips for ethical hackers.

How to Setup Kali Linux on Docker + Create Custom Image & File Share

I made a walkthrough video for anyone who wants to run Kali Linux in a more lightweight, consistent way using Docker.

The video covers:

  • Installing Kali Linux via Docker
  • Avoiding the “it works on my machine” issue
  • Creating your own custom Docker image
  • Setting up file share between host and container

It’s a solid way to practice hacking without spinning up a whole VM — and great for anyone doing tutorials that require a Kali Linux instance, or folks who are starting out their penetration testing or bug bounty journey. At least for me, I was using a super bloated Kali Linux VM for many years …

If you have a better setup suggestion or advise that you want to share with others, please add them in the comments!

Watch it here:

3 FREE Websites To Learn Ethical Web Hacking (Beginner Friendly)

3 FREE Websites To Learn Ethical Web Hacking (Beginner Friendly)

Want to start learning ethical web hacking for FREE?

In this video, I break down 3 websites that offer hands-on labs, structured paths, and gamified learning – perfect for beginners in web application penetration testing and bug bounty!

Here’s who made the list:

✅ PortSwigger Web Security Academy
Learn real-world web vulnerabilities with interactive labs

✅ TryHackMe
Gamified challenges + guided learning paths

✅ Hack The Box
Academy modules, practice labs & certifications — all linked together

But I didn’t stop at listing them.

I shared my professional take on:
1️⃣ Their unique strengths
2️⃣ What makes each platform great for beginners
3️⃣ And where they could improve to become even better

This isn’t just another list — they are insights from an active bug bounty hunter from Singapore

Timestamps and useful links in the video description.

Comment your favorite FREE hacking resources — let’s share and help each other grow!

5 Tips for Boosting Long-Term Engagement in your Bug Bounty Program

5 Tips for Boosting Long-Term Engagement in your Bug Bounty Program

❓ How can bug bounty programs …

1️⃣ Keep hackers engaged in the long term?
2️⃣ Effectively increase the amount of good quality reports that you receive?
3️⃣ Stand out from competition and be the program that hackers choose to hack on?

️In this video, I covered 5 tips that can allow any bug bounty programs to stand out from the rest. If you implement them, you can expect an increased participation from skilled and good hackers (or security researchers) and a consistent stream of valuable vulnerability submissions! Most importantly, are you ready to handle the resulting high quality reports?

Hackers, if these tips hit the mark, please share them with your favourite bug bounty programs! Your input could lead to improvements like loyalty programs and direct report submissions (skip platform analysts or triage teams). Let’s level up the bug bounty landscape together!

Black Hat Asia 2025 Panel Session - Wen Bin's cut only

Black Hat Asia 2025 Panel Session – Wen Bin’s cut only

I was invited to be a speaker to represent the hacker’s perspective in the panel session for “Three Perspectives on Bug Bounty Program Success” at the Black Hat Asia 2025 security conference!

It was my first time public speaking in a security conference, it was a fun and humbling experience! Please pardon the stuttering and nervousness, at least I tried my best to share!

In this video, I have compiled my own’s cut from the panel session, I hope the things I shared are useful to you!