Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hunting Bugs In Real Life

akshat singhal
September 23, 2020
Technology
0
89

Hunting Bugs In Real Life

akshat singhal

September 23, 2020
Tweet

Other Decks in Technology

See All in Technology
技術スタックだけじゃない、業務ドメイン知識のオンボーディングも同じくらいの量が必要な話
niftycorp
PRO
0
120
AI Agent時代なのでAWSのLLMs.txtが欲しい！
watany
3
350
リクルートのエンジニア組織を下支えする 新卒の育成の仕組み
recruitengineers
PRO
1
150
AIエージェント入門
minorun365
PRO
33
19k
アジャイルな開発チームでテスト戦略の話は誰がする？ / Who Talks About Test Strategy?
ak1210
1
760
OPENLOGI Company Profile for engineer
hr01
1
20k
大規模アジャイルフレームワークから学ぶエンジニアマネジメントの本質
staka121
PRO
3
1.4k
Amazon Aurora のバージョンアップ手法について
smt7174
2
180
開発者のための FinOps/FinOps for Engineers
oracle4engineer
PRO
2
230
手を動かしてレベルアップしよう！
maruto
0
240
JAWS DAYS 2025 アーキテクチャ道場 事前説明会 / JAWS DAYS 2025 briefing document
naospon
0
2.7k
自分だけの仮想クラスタを高速かつ効率的に作る kubefork
donkomura
0
110

Featured

See All Featured
Principles of Awesome APIs and How to Build Them.
keavy
126
17k
[RailsConf 2023] Rails as a piece of cake
palkan
53
5.3k
Designing Experiences People Love
moore
140
23k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
29
1k
Building Flexible Design Systems
yeseniaperezcruz
328
38k
Side Projects
sachag
452
42k
Adopting Sorbet at Scale
ufuk
75
9.2k
The Art of Delivering Value - GDevCon NA Keynote
reverentgeek
11
1.3k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
175
52k
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
4
440
Why You Should Never Use an ORM
jnunemaker
PRO
55
9.2k
Designing Dashboards & Data Visualisations in Web Apps
destraynor
231
53k

Transcript

  1. None

  2. BUG BOUNTY WEBINAR

  3. HUNTING BUGS IN REAL LIFE Akshat Singhal

  4. Who am I • Bug crowd Top 700 Researcher –

    All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner

  5. @Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999

  6. None
  7. None
  8. None

  9. STORED DOM REFLECTED

  10. None
  11. None

  12. SQL injection is a web security vulnerability that allows an

    attacker to interfere with the queries that an application makes to its database.

  13. ▪ admin’—

  14. None
  15. None

  16. TYPES HORIZONTAL VERTICAL

  17. None
  18. None
  19. None

  20.  CSRF + XSS --> Account Takeover  User enum.

    + IDOR --> All users compromise
  21. None

  22.          

  23. None