Upgrade to Pro — share decks privately, control downloads, hide ads and more …

METHODOLOGIES AND APPROACH TO START BUG BOUNTY ...

Tushar Verma
July 25, 2021
Technology
0
550

METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING

Tushar Verma

July 25, 2021
Tweet

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
e11i0t_4lders0n
0
150
AWS Cloud Forensics & Incident Response
e11i0t_4lders0n
1
640
Hacking OAuth Applications
e11i0t_4lders0n
1
2k
Exploiting SSRF like a Boss
e11i0t_4lders0n
2
1.1k
How to Fail at Bug Bounty Hunting
e11i0t_4lders0n
1
1.7k
The Bug Hunter’s Recon Methodology
e11i0t_4lders0n
2
760
Bypassing 2FA Misconfiguration
e11i0t_4lders0n
1
2.2k
How to get started in bug bounty
e11i0t_4lders0n
1
470

Other Decks in Technology

See All in Technology
いまさらのStorybook
ikumatadokoro
0
140
生成AIと知識グラフの相互利用に基づく文書解析
koujikozaki
1
140
君は隠しイベントを見つけれるか？
mujyun
0
290
事業者間調整の行間を読む 調整の具体事例
sugiim
0
1.5k
生成AIの強みと弱みを理解して、生成AIがもたらすパワーをプロダクトの価値へ繋げるために実践したこと / advance-ai-generating
cyberagentdevelopers
PRO
1
180
オーティファイ会社紹介資料 / Autify Company Deck
autifyhq
9
120k
Datachain会社紹介資料（2024年11月） / Company Deck
datachain
3
16k
ABEMA のコンテンツ制作を最適化！生成 AI x クラウド映像編集システム / abema-ai-editor
cyberagentdevelopers
PRO
1
180
独自ツール開発でスタジオ撮影をDX！「VLS（Virtual LED Studio）」 / dx-studio-vls
cyberagentdevelopers
PRO
1
180
生成AIとAWS CDKで実現！ 自社ブログレビューの効率化
ymae
2
330
【若手エンジニア応援LT会】AWSで繋がり、共に成長！ ～コミュニティ活動と新人教育への挑戦～
kazushi_ohata
0
180
omakaseしないための.rubocop.yml のつくりかた / How to Build Your .rubocop.yml to Avoid Omakase #kaigionrails
linkers_tech
3
740

Featured

See All Featured
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
107
49k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
226
22k
Building Applications with DynamoDB
mza
90
6.1k
Unsuck your backbone
ammeep
668
57k
Building Better People: How to give real-time feedback that sticks.
wjessup
363
19k
Fireside Chat
paigeccino
32
3k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
31
2.7k
Stop Working from a Prison Cell
hatefulcrawdad
267
20k
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
28
9.1k
It's Worth the Effort
3n
183
27k
Done Done
chrislema
181
16k
Building an army of robots
kneath
302
42k

Transcript

  1. METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING By: Tushar

    Verma

  2. WHOAMI Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter

  3. AGENDA What is Bug Bounty Hunting Bug Bounty Platform Scope

    Review and Target Selection Recon Methodologies Manual Testing Approach

  4. WHAT IS BUG BOUNTY HUNTING

  5. Bug Bounty Platform Bugcrowd Hackerone Intigriti YesWeHack HackenProof Cesspa Synack

    Private Programs

  6. Scope Review and Target Selection Check the Description and Focus

    Area Check the In-Scope and Out-scope of the target Check the average response time Check the pay-out and How many vulnerabilities reported

  7. Recon Methodologies Small Scope Recon – Specific sets of single

    URLs Medium Scope Recon - Specific set of “*.target.com” Large Scope Recon – Everything in Scope

  8. Automating Recon Project Bheem ReconFTW Osmedeus

  9. MANUAL TESTING APPROACH

  10. GET IN TOUCH AT ◦ Twitter: @e11i0t_4lders0n ◦ LinkedIn: /in/tushars25

    ◦ Instagram: @e11i0t_4lders0n__ ◦ Email: [email protected]