Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hunting Bugs In Real Life

akshat singhal
September 23, 2020
Technology
0
89

Hunting Bugs In Real Life

akshat singhal

September 23, 2020
Tweet

Other Decks in Technology

See All in Technology
Share my, our lessons from the road to re:Invent
naospon
0
140
アジャイルな開発チームでテスト戦略の話は誰がする？ / Who Talks About Test Strategy?
ak1210
1
600
Snowflakeの開発・運用コストをApache Icebergで効率化しよう！～機能と活用例のご紹介～
sagara
1
460
Visualize, Visualize, Visualize and rclone
tomoaki0705
9
83k
JavaにおけるNull非許容性
skrb
2
2.6k
スキルだけでは満たせない、 “組織全体に”なじむオンボーディング/Onboarding that fits “throughout the organization” and cannot be satisfied by skills alone
bitkey
0
180
（機械学習システムでも） SLO から始める信頼性構築 - ゆる SRE#9 2025/02/21
daigo0927
0
270
ExaDB-XSで利用されている Exadata Exascaleについて
oracle4engineer
PRO
3
260
Amazon Q Developerの無料利用枠を使い倒してHello worldを表示させよう！
nrinetcom
PRO
2
120
AI Agent時代なのでAWSのLLMs.txtが欲しい！
watany
2
230
ディスプレイ広告（Yahoo!広告・LINE広告）におけるバックエンド開発
lycorptech_jp
PRO
0
380
脳波を用いた嗜好マッチングシステム
hokkey621
0
290

Featured

See All Featured
YesSQL, Process and Tooling at Scale
rocio
172
14k
Product Roadmaps are Hard
iamctodd
PRO
50
11k
Visualization
eitanlees
146
15k
BBQ
matthewcrist
87
9.5k
Mobile First: as difficult as doing things right
swwweet
223
9.4k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
30
2.2k
The Pragmatic Product Professional
lauravandoore
32
6.4k
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
4
430
Code Review Best Practice
trishagee
67
18k
Testing 201, or: Great Expectations
jmmastey
42
7.2k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
12
990
For a Future-Friendly Web
brad_frost
176
9.6k

Transcript

  1. None

  2. BUG BOUNTY WEBINAR

  3. HUNTING BUGS IN REAL LIFE Akshat Singhal

  4. Who am I • Bug crowd Top 700 Researcher –

    All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner

  5. @Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999

  6. None
  7. None
  8. None

  9. STORED DOM REFLECTED

  10. None
  11. None

  12. SQL injection is a web security vulnerability that allows an

    attacker to interfere with the queries that an application makes to its database.

  13. ▪ admin’—

  14. None
  15. None

  16. TYPES HORIZONTAL VERTICAL

  17. None
  18. None
  19. None

  20.  CSRF + XSS --> Account Takeover  User enum.

    + IDOR --> All users compromise
  21. None

  22.          

  23. None