Till this time, i learned owasp top 10 and some common web Application bugs. i used to do website defacement that time. our team used to exploit hundreds of pakistani websites. by the time, i get to know about portsigger and other security labs, i solved them and started my carrer in bug bounty hunting.

I started on H1 and bugcrowd platforms, this two are best for hunting bugs, but at that time, im not that much good at web security. so, after wasting several months on this platforms, im still unable to find a single bug. so i started hunting on responsible disclosure programs. and it worked. i got my first bounty in rdp. i also submited some bugs to goverment of india and got feachered in NCIIPC's news letter.

i started ctfs just for fun. im a good gamer since childhood days. the first platform i found that time was hackthebox. i started my journey from bigginer level mashines. that time im good at linux and android, but not so good on windows exploitment. in htb boxes, i got to learn about windows exploits. by the time, i started solving Insane mashines. and have some good knowledge in exploit development and reverce engineering.

after some months, i started playing online ctfs, like real world ctf and dice ctf. i got my first rewerd on sainya-ranakshtram ctf. its an indian army ctf. i got 4th rank in that. in jan 2022 i won my first prize. i got 2nd rank in GCC3.0, it also known as cyber peace chellange, in which more than 70 countries participate and try to hack web, apps, networks, social engineering and much more. that was great experience.