Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Hunting Bugs In Real Life
Search
akshat singhal
September 23, 2020
Technology
100
0
Share
Hunting Bugs In Real Life
akshat singhal
September 23, 2020
Other Decks in Technology
See All in Technology
インターネットの技術 / Internet technology
ks91
PRO
0
210
Keeping Ruby Running on Cygwin
fd0
0
170
マルチエージェント × ハーネスエンジニアリング × GitLab Duo Agent Platformで実現する「AIエージェントに仕事をさせる時代へ。」 / 20260421 GitLab Duo Agent Platform
n11sh1
0
170
AI バイブコーティングでキーボード不要?!
samakada
0
590
The Journey of Box Building
tagomoris
4
3.1k
「責任あるAIエージェント」こそ自社で開発しよう!
minorun365
9
2.1k
ハーネスエンジニアリングの概要と設計思想
sergicalsix
9
5.1k
みんなの「データ活用」を支えるストレージ担当から持ち込むAWS活用/コミュニティー設計TIPS 10選~「作れる」より、「続けられる」設計へ~
yoshiki0705
0
250
M5Stack CoreS3とZephyr(RTOS)で Edge AIっぽいことしてみた
iotengineer22
0
260
Pure Intonation on Browser: Building a Sequencer with Ruby
nagachika
0
140
20260428_Product Management Summit_tadokoroyoshiro
tadokoro_yoshiro
4
4.6k
ぼくがかんがえたさいきょうのあうとぷっと
yama3133
0
200
Featured
See All Featured
Performance Is Good for Brains [We Love Speed 2024]
tammyeverts
12
1.6k
Building the Perfect Custom Keyboard
takai
2
730
Large-scale JavaScript Application Architecture
addyosmani
515
110k
Hiding What from Whom? A Critical Review of the History of Programming languages for Music
tomoyanonymous
2
770
Agile that works and the tools we love
rasmusluckow
331
21k
Become a Pro
speakerdeck
PRO
31
5.9k
Neural Spatial Audio Processing for Sound Field Analysis and Control
skoyamalab
0
270
Product Roadmaps are Hard
iamctodd
PRO
55
12k
Unsuck your backbone
ammeep
672
58k
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
49
3.4k
What’s in a name? Adding method to the madness
productmarketing
PRO
24
4k
Measuring Dark Social's Impact On Conversion and Attribution
stephenakadiri
2
190
Transcript
None
BUG BOUNTY WEBINAR
HUNTING BUGS IN REAL LIFE Akshat Singhal
Who am I • Bug crowd Top 700 Researcher –
All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner
@Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999
None
None
None
STORED DOM REFLECTED
None
None
SQL injection is a web security vulnerability that allows an
attacker to interfere with the queries that an application makes to its database.
▪ admin’—
None
None
TYPES HORIZONTAL VERTICAL
None
None
None
CSRF + XSS --> Account Takeover User enum.
+ IDOR --> All users compromise
None
None