kongwenbin

With just two days to National Day, I had an unexpected moment of reflection 🤔

While cleaning out my display cabinet, I stumbled upon this bug-shaped trophy 🏆🐞 - a unique and meaningful reminder of a time when I had the opportunity to contribute directly to our nation's digital defense 🛡️

It brought back vivid memories of intense (and fun) bug hunting sessions. There were no big rewards, but what I gained was far more valuable: lasting friendships, unforgettable experiences, and a deep sense of purpose ✨

I can't tag anyone who served alongside me back in the days for obvious reasons - but I am proud to see how we have all continued the mission in our own ways, still doing our part to help Singapore stay strong, secure, and forward looking 💪

This cute trophy? Just a little bonus 😊

Happy National Day, Singapore 🎉🇸🇬

Here's to keeping our little red dot safe - online and beyond 🥂

4 months ago | [YT] | 5

kongwenbin

🚨 Want to host your own WireGuard VPN on a VPS like DigitalOcean?

I just dropped a full step-by-step beginner tutorial — perfect for bug bounty hunters, privacy enthusiasts, or anyone who wants a faster, cheaper, and more secure VPN setup.

In this guide, I show you how to:
✅ Create your VPS
✅ Install WireGuard + configure server & client
✅ Enable IP forwarding, firewall, and auto start
✅ Connect from your Mac using config file or Phone using QR code

🎥 Watch now: https://youtu.be/p2a7wdvtnwg

Let me know in the comments if you tried it out!

5 months ago | [YT] | 1

kongwenbin

📌 Hey everyone! 👋 Super excited to share that the entire OverTheWire Bandit Wargame Series (all 6 videos) now has accurate, manually created English subtitles! I personally typed and aligned them to ensure everything is spot-on (no YouTube auto-gen here!).

To enable them, just go to your video settings: 【 Settings > Subtitles/CC > English 】

Watch the FULL PLAYLIST (6 videos covering all 32 stages):
👉: www.youtube.com/playlist?list...

Hope this helps you learn even better! Let me know in the comments if they make a difference for you! 👇

5 months ago | [YT] | 2

kongwenbin

New video up! If you've ever downloaded a VulnHub machine that came only with a .vmdk file — and had no idea what to do next — this is for you.

I walked through how to launch that machine in VMware Workstation, step-by-step.

Watch here 👉 https://youtu.be/m9-NT903Evo

6 months ago | [YT] | 2

kongwenbin

Want to run Kali Linux without the full VM overhead?

I just posted a full walkthrough on how to run Kali in Docker, create a custom image, and even set up file sharing with your host machine. It's beginner-friendly and great for using it to following any step-by-step tutorials too.

🎥 Watch here: https://youtu.be/JmF628xGk1A

6 months ago | [YT] | 1

kongwenbin

🚨 Want to start learning ethical web hacking for FREE?

🎯 In this video, I break down 3 websites that offer hands-on labs, structured paths, and gamified learning - perfect for beginners in web application penetration testing and bug bounty!

🎓 Here’s who made the list:

✅ PortSwigger Web Security Academy
Learn real-world web vulnerabilities with interactive labs

✅ TryHackMe
Gamified challenges + guided learning paths

✅ Hack The Box
Academy modules, practice labs & certifications — all linked together

But I didn’t stop at listing them.

💡 I shared my professional take on:
1️⃣ Their unique strengths
2️⃣ What makes each platform great for beginners
3️⃣ And where they could improve to become even better

This isn't just another list — they are insights from an active bug bounty hunter from Singapore 🇸🇬😊

📌 Timestamps and useful links in the video description

👇 Comment your favorite FREE hacking resources — let's share and help each other grow!

#BugBounty #BugBountyTips #CyberSecurity #EthicalHacking #TryHackMe #HackTheBox #PortSwigger

6 months ago | [YT] | 1

kongwenbin

Here's an UPDATE for this video: **Bug Bounty: How I gained over 1000 REPUTATION on HackerOne in 3 Months**
👉 https://www.youtube.com/watch?v=o4R-M...

At 04:52, I mentioned that when your report was closed as "duplicate", the only way to estimate how long ago was the "original report" submitted was to see the ID of the "original report". If its report ID is very far away from your report ID, or if you have some old reports with similar report ID as the "original report", you will be able to derive with a highly probable estimation of when was the original report submitted. That way, you can know whether the program has been fixing bugs actively. Otherwise, very likely your next report will also be a "duplicate".

NOW, you don't have to use this method anymore. HackerOne has a new feature whereby if your report was closed as a "duplicate", they will directly provide you with the report title and report submission date.

I have included a screenshot for your reference as well.

6 months ago | [YT] | 5

kongwenbin

🎊 FINALLY, the last (6th) video of the *OverTheWire Bandit Step-by-step Walkthrough series (with explanations)* just went LIVE!! 🔥🔥🔥

🔍 Please check it out if you are interested yeah! I have added the video in this post 😊

OR if you want to watch the FULL PLAYLIST (6 videos covering all 32 stages):
👉 www.youtube.com/playlist?list...

6 months ago | [YT] | 2

kongwenbin

💡 One of the life hack that is very important to learn is to make use of resources provided to us. In the case of YouTube, there is this "CC" button (usually bottom of the video) which allows subtitles to be added to the video you are watching. I am sharing this because I noticed not many people use this feature 🤔

👉 If it says "English (auto-generated)", they are REALLY generated by YouTube platform. There is no human intervention (no one vets it) and while they are great, they are sometimes not so accurate, especially when it comes to an Asian's pronunciation of words or things like someone's Chinese name. 😉

▶️ Whenever available, select "English" or any options that does not have the "(auto-generated)" tag. ◀️

😎 Yes, any of such options are subtitles that have been MANUALLY WRITTEN/UPDATED by the video owner, so they are usually more accurate ✍️

7 months ago | [YT] | 3

kongwenbin

A little late but I am happy to share that I finished the year of 2024 in first place among Singapore ‪@HackerOneTV‬ HackerOne researchers 🇸🇬

Big thanks to everyone who believe in me and keep me motivated in my bug bounty journey! 🫰

It has been a hectic year, very challenging programs and was invited to my first live hacking event 🔥 hope can post more content this year!

#bugbounty #hackerone #TogetherWeHitHarder #security #bughunting

10 months ago | [YT] | 11