Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

METHODOLOGIES AND APPROACH TO START BUG BOUNTY ...

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Tushar Verma Tushar Verma
July 25, 2021
Technology
630
0

METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING

Avatar for Tushar Verma

Tushar Verma

July 25, 2021

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
240
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
750
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2.1k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.2k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.8k
The Bug Hunter’s Recon Methodology
Avatar for Tushar Verma e11i0t_4lders0n
2
810
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.4k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
530

Other Decks in Technology

See All in Technology
フィンテック養成勉強会#68
Avatar for フィンテック養成コミュニティ finengine
0
240
Metadata - Section 2: Simple Metadata & Meta Tags
Avatar for mohab soliman mohab1
0
140
ポケモン対戦を自動で記録して振り返ろう
Avatar for Yusuke Fukasawa fufufukakaka
0
400
Vue.jsのGitHubから学ぶ意思決定
Avatar for Yuto Nagai(Future) yut0naga1_fa
1
210
「作れる」と「リリースできる」の間にあったもの── PdMを外して見えた、PdMがやるべき仕事/Buildable ≠ Shippable: What Removing the PM Taught Me About the PM’s Job
Avatar for Yappli Developers yappli_developers
0
280
Let's Change Our World—Again
Avatar for Koji SHIMADA snoozer05
PRO
6
680
トークン化預金DCJPYの取り組みと活用ユースケース
Avatar for フィンテック養成コミュニティ finengine
0
250
Gemini Intelligence 入門 ― AppFunctions と Gemini Nano
Avatar for takuro abe takuroabe
0
370
撮るだけでは終わらない。ソニーが挑むB2Bカメラソリューション開発
Avatar for ソニー株式会社 sony
0
110
顧客価値を追いかけたら、プライシングにたどり着いた
Avatar for SansanTech sansantech
PRO
2
1k
Obsidian Vault Architectures
Avatar for Daisuke Masuda x5gtrn
PRO
0
150
「Learning Outcome」を書きたくない私が、Learning Outcomeと折り合いをつけるまで
Avatar for リリカル mhlyc
0
240

Featured

See All Featured
Stewardship and Sustainability of Urban and Community Forests
Avatar for Eric Wiseman pwiseman
0
560
Designing Experiences People Love
Avatar for Jonathan Moore moore
143
24k
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
464
34k
Are puppies a ranking factor?
Avatar for Jono Alderson jonoalderson
2
4.1k
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
12k
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
Avatar for Ines Montani inesmontani
PRO
0
760
Accessibility Awareness
Avatar for Sarah Abderemane sabderemane
1
260
Skip the Path - Find Your Career Trail
Avatar for Mark Kilby mkilby
1
260
Visualization
Avatar for Eitan Lees eitanlees
153
17k
The Language of Interfaces
Avatar for Des Traynor destraynor
162
27k
How to Build an AI Search Optimization Roadmap - Criteria and Steps to Take #SEOIRL
Avatar for Aleyda Solis aleyda
1
2.2k
sira's awesome portfolio website redesign presentation
Avatar for ElsiraPls elsirapls
0
470

Transcript

  1. METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING By: Tushar

    Verma

  2. WHOAMI Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter

  3. AGENDA What is Bug Bounty Hunting Bug Bounty Platform Scope

    Review and Target Selection Recon Methodologies Manual Testing Approach

  4. WHAT IS BUG BOUNTY HUNTING

  5. Bug Bounty Platform Bugcrowd Hackerone Intigriti YesWeHack HackenProof Cesspa Synack

    Private Programs

  6. Scope Review and Target Selection Check the Description and Focus

    Area Check the In-Scope and Out-scope of the target Check the average response time Check the pay-out and How many vulnerabilities reported

  7. Recon Methodologies Small Scope Recon – Specific sets of single

    URLs Medium Scope Recon - Specific set of “*.target.com” Large Scope Recon – Everything in Scope

  8. Automating Recon Project Bheem ReconFTW Osmedeus

  9. MANUAL TESTING APPROACH

  10. GET IN TOUCH AT ◦ Twitter: @e11i0t_4lders0n ◦ LinkedIn: /in/tushars25

    ◦ Instagram: @e11i0t_4lders0n__ ◦ Email: [email protected]