Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hunting Bugs In Real Life

akshat singhal
September 23, 2020
Technology
0
89

Hunting Bugs In Real Life

akshat singhal

September 23, 2020
Tweet

Other Decks in Technology

See All in Technology
CDCL による厳密解法を採用した MILP ソルバー
imai448
3
140
開発生産性を上げながらビジネスも30倍成長させてきたチームの姿
kamina_zzz
2
1.7k
マルチプロダクトな開発組織で 「開発生産性」に向き合うために試みたこと / Improving Multi-Product Dev Productivity
sugamasao
1
310
『Firebase Dynamic Links終了に備える』 FlutterアプリでのAdjust導入とDeeplink最適化
techiro
0
130
ノーコードデータ分析ツールで体験する時系列データ分析超入門
negi111111
0
420
組織成長を加速させるオンボーディングの取り組み
sudoakiy
2
210
IBC 2024 動画技術関連レポート / IBC 2024 Report
cyberagentdevelopers
PRO
1
110
日経電子版のStoreKit2フルリニューアル
shimastripe
1
140
Introduction to Works of ML Engineer in LY Corporation
lycorp_recruit_jp
0
140
生成AIが変えるデータ分析の全体像
ishikawa_satoru
0
170
Platform Engineering for Software Developers and Architects
syntasso
1
520
EventHub Startup CTO of the year 2024 ピッチ資料
eventhub
0
120

Featured

See All Featured
Designing on Purpose - Digital PM Summit 2013
jponch
115
7k
A Modern Web Designer's Workflow
chriscoyier
693
190k
How STYLIGHT went responsive
nonsquared
95
5.2k
Fireside Chat
paigeccino
34
3k
Gamification - CAS2011
davidbonilla
80
5k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
kevinliebholz
27
4.3k
Speed Design
sergeychernyshev
25
620
Learning to Love Humans: Emotional Interface Design
aarron
273
40k
Designing for Performance
lara
604
68k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
665
120k
5 minutes of I Can Smell Your CMS
philhawksworth
202
19k
For a Future-Friendly Web
brad_frost
175
9.4k

Transcript

  1. None

  2. BUG BOUNTY WEBINAR

  3. HUNTING BUGS IN REAL LIFE Akshat Singhal

  4. Who am I • Bug crowd Top 700 Researcher –

    All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner

  5. @Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999

  6. None
  7. None
  8. None

  9. STORED DOM REFLECTED

  10. None
  11. None

  12. SQL injection is a web security vulnerability that allows an

    attacker to interfere with the queries that an application makes to its database.

  13. ▪ admin’—

  14. None
  15. None

  16. TYPES HORIZONTAL VERTICAL

  17. None
  18. None
  19. None

  20.  CSRF + XSS --> Account Takeover  User enum.

    + IDOR --> All users compromise
  21. None

  22.          

  23. None