‘Proficiency takes time’: Xel on his best Bug Bounty finds and the primacy of patience in ethical hacking

This interview with Raphaël “Xel” Arrouas outlines his transition to full-time bug bounty hunting, the challenges of freelance vulnerability research, and advice for aspiring hunters; he also recounts notable finds (an unauthenticated RCE on a firewall orchestrator and a constrained server-side template injection RCE in an e-banking app). The piece is educational/promotional rather than a technical incident or threat report.