Upgrade to Pro — share decks privately, control downloads, hide ads and more …

METHODOLOGIES AND APPROACH TO START BUG BOUNTY ...

Avatar for Tushar Verma Tushar Verma
July 25, 2021
Technology
630
0

METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING

Avatar for Tushar Verma

Tushar Verma

July 25, 2021

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
230
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
730
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2.1k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.1k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.7k
The Bug Hunter’s Recon Methodology
Avatar for Tushar Verma e11i0t_4lders0n
2
810
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.4k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
510

Other Decks in Technology

See All in Technology
【GCC2026】鉄拳8でのVFX開発事例
Avatar for Bandai Namco Studios Inc. bandainamcostudios
PRO
0
300
2026-08-15 JAWS-UG 茨城 #16 Secrets ManagerにおけるSecret値の管理(Terraformの場合) / Secrets Manager Secrets
Avatar for SUZUKI Masashi masasuzu
0
600
Oracle MCP Servers Explained
Avatar for thatjeffsmith thatjeffsmith
0
460
医療の現場を変革に挑戦した半年間の軌跡 - PythonとAIで現場を変える / From Code to Care
Avatar for soudai sone soudai
PRO
1
600
:syncing_time:
Avatar for sksat sksat
2
700
内製AIチャットボット開発で学んだ Datadog Agent Observability活用術
Avatar for k.masachika mkdev10
0
130
Claude Teamプランの コスト最適化を考える
Avatar for ふくだ（fukuda ryu） rfdnxbro
0
200
[potatotips #96] Give Your AI Agent the Flutter Playbook
Avatar for Kenichi Kambara korodroid
0
160
AIに持続⼒を与える 判断の⻑期記憶設計
Avatar for eiei114 eiei114
1
690
2027年のMetricKit
Avatar for Kanta Oikawa kantacky
0
170
形式手法特論：Hyperproperty とモデル検査 #kernelvm / Kernel VM Study Tokyo 19th
Avatar for y_taka_23 ytaka23
0
770
小粒でもパワフルなJS Runtime Antjsについて
Avatar for Comamoca comamoca
0
120

Featured

See All Featured
The agentic SEO stack - context over prompts
Avatar for schlessera schlessera
0
870
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
174
15k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
37
6.6k
How to build an LLM SEO readiness audit: a practical framework
Avatar for Nick Samuel nmsamuel
1
870
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
75
12k
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
698
190k
世界の人気アプリ100個を分析して見えたペイウォール設計の心得
Avatar for Akihiro Kokubo akihiro_kokubo
PRO
73
41k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
56
3.4k
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
Avatar for AKADEMIYA2063 akademiya2063
PRO
1
280
Build The Right Thing And Hit Your Dates
Avatar for Maggie C. maggiecrowley
39
3.4k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
35
3.8k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.9k

Transcript

  1. METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING By: Tushar

    Verma

  2. WHOAMI Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter

  3. AGENDA What is Bug Bounty Hunting Bug Bounty Platform Scope

    Review and Target Selection Recon Methodologies Manual Testing Approach

  4. WHAT IS BUG BOUNTY HUNTING

  5. Bug Bounty Platform Bugcrowd Hackerone Intigriti YesWeHack HackenProof Cesspa Synack

    Private Programs

  6. Scope Review and Target Selection Check the Description and Focus

    Area Check the In-Scope and Out-scope of the target Check the average response time Check the pay-out and How many vulnerabilities reported

  7. Recon Methodologies Small Scope Recon – Specific sets of single

    URLs Medium Scope Recon - Specific set of “*.target.com” Large Scope Recon – Everything in Scope

  8. Automating Recon Project Bheem ReconFTW Osmedeus

  9. MANUAL TESTING APPROACH

  10. GET IN TOUCH AT ◦ Twitter: @e11i0t_4lders0n ◦ LinkedIn: /in/tushars25

    ◦ Instagram: @e11i0t_4lders0n__ ◦ Email: [email protected]