Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hunting Bugs In Real Life

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for akshat singhal akshat singhal
September 23, 2020
Technology
110
0

Hunting Bugs In Real Life

Avatar for akshat singhal

akshat singhal

September 23, 2020

Other Decks in Technology

See All in Technology
ご挨拶「10周年を迎える共創ラボのこれまでとこれから」
Avatar for AIxIoTビジネス共創ラボ iotcomjpadmin
0
170
AWS PrivateLink × SCIM で実現する セキュアで運⽤負荷の低い Databricks 基盤の構築
Avatar for tsudash0 tsuda7
0
120
IaC コードを資産へ：AWS CDK 社内ライブラリと横断展開 / aws-summit-japan-2026
Avatar for k.goto gotok365
10
1.7k
CVE-2026-20833_脆弱性対応とAES 化について
Avatar for Jun1214 jukishiya
0
300
LiDAR SLAMの実装とセンサ融合 ~Lie群からContinuous-Time LIOまで~
Avatar for Naoki Akai naokiakai
1
720
From Prompt Engineering to Loop Engineering
Avatar for shibuiwilliam shibuiwilliam
1
310
コミュニティの有益性 ~JAWS Days 2026 での体験を通して~ / The Benefits of a Community ~Through My Experience at JAWS Days 2026~
Avatar for shiro seike seike460
PRO
0
310
製造現場での生成AIの活用、およびエージェントAIの実装のあり方、AVEVAの取り組み
Avatar for AIxIoTビジネス共創ラボ iotcomjpadmin
0
210
作る力から、見極める力へ — AI時代に広がるエンジニアの価値と役割
Avatar for rince rince
0
390
きのこカンファレンス2026_肩書きを外したとき私は誰か
Avatar for yamasatimi yamasatimi
1
110
AI-DLCを “そのまま導入しなかった”話 ~組織に合わせてアジャストした 私たちの実践共有~
Avatar for hiroramos hiroramos4
PRO
1
480
スタートアップにおけるアジャイルの実践について #shibuyagile
Avatar for bayashi murabayashi
2
830

Featured

See All Featured
Understanding Cognitive Biases in Performance Measurement
Avatar for Philip Tellis bluesmoon
32
2.9k
Are puppies a ranking factor?
Avatar for Jono Alderson jonoalderson
1
3.7k
The Curse of the Amulet
Avatar for Matthew Lei leimatthew05
2
13k
Agile Actions for Facilitating Distributed Teams - ADO2019
Avatar for Mark Kilby mkilby
0
210
We Analyzed 250 Million AI Search Results: Here's What I Found
Avatar for Josh Blyskal joshbly
1
1.4k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
15k
A Tale of Four Properties
Avatar for Chris Coyier chriscoyier
163
24k
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
Avatar for Ines Montani inesmontani
PRO
0
420
Code Reviewing Like a Champion
Avatar for maltzj maltzj
528
40k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
18k
Agile Leadership in an Agile Organization
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
170
Darren the Foodie - Storyboard
Avatar for Kevinho.art khoart
PRO
3
3.4k

Transcript

  1. None

  2. BUG BOUNTY WEBINAR

  3. HUNTING BUGS IN REAL LIFE Akshat Singhal

  4. Who am I • Bug crowd Top 700 Researcher –

    All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner

  5. @Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999

  6. None
  7. None
  8. None

  9. STORED DOM REFLECTED

  10. None
  11. None

  12. SQL injection is a web security vulnerability that allows an

    attacker to interfere with the queries that an application makes to its database.

  13. ▪ admin’—

  14. None
  15. None

  16. TYPES HORIZONTAL VERTICAL

  17. None
  18. None
  19. None

  20.  CSRF + XSS --> Account Takeover  User enum.

    + IDOR --> All users compromise
  21. None

  22.          

  23. None