HOW DO YOU ACTUALLY FIND BUGS? (MY 2 YEAR EXPERIENCE)

Summary from the TLDR InfoSec newsletter

This post describes how to find vulnerabilities in applications. It explains a method for hunting CSRFs, a familiar vulnerability for most people to start with.