Upgrade to Pro — share decks privately, control downloads, hide ads and more …

METHODOLOGIES AND APPROACH TO START BUG BOUNTY ...

Avatar for Tushar Verma Tushar Verma
July 25, 2021
Technology
0
580

METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING

Avatar for Tushar Verma

Tushar Verma

July 25, 2021
Tweet

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
180
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
680
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.1k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.7k
The Bug Hunter’s Recon Methodology
Avatar for Tushar Verma e11i0t_4lders0n
2
770
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.3k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
490

Other Decks in Technology

See All in Technology
kaigi_on_rails_2025_設計.pdf
Avatar for Yasuko Ohba nay3
8
4.1k
【新卒研修資料】LLM・生成AI研修 / Large Language Model・Generative AI
Avatar for BrainPad brainpadpr
21
14k
PythonとLLMで挑む、 4コマ漫画の構造化データ化
Avatar for esuji esuji5
0
120
Pythonによる契約プログラミング入門 / PyCon JP 2025
Avatar for 7pairs 7pairs
4
2.2k
Sidekiq その前に：Webアプリケーションにおける非同期ジョブ設計原則
Avatar for morihirok morihirok
17
6.3k
Railsアプリケーション開発者のためのブックガイド
Avatar for Masayoshi Takahashi takahashim
12
5.2k
非エンジニアのあなたもできる＆もうやってる！コンテキストエンジニアリング
Avatar for ファインディ株式会社（イベント資料アップ用） findy_eventslides
3
850
OpenAI gpt-oss ファインチューニング入門
Avatar for kmotohas kmotohas
1
590
AWSのProductのLifecycleについて
Avatar for Takuya Shibata stknohg
PRO
0
300
バイブコーディングと継続的デプロイメント
Avatar for nwiizo nwiizo
2
360
Green Tea Garbage Collector の今
Avatar for zchee zchee
PRO
2
360
BtoBプロダクト開発の深層
Avatar for 16bit_idol 16bitidol
0
140

Featured

See All Featured
Building an army of robots
Avatar for Kyle Neath kneath
306
46k
The Straight Up "How To Draw Better" Workshop
Avatar for Dennis Kardys denniskardys
237
140k
Designing Experiences People Love
Avatar for Jonathan Moore moore
142
24k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
53
9k
Navigating Team Friction
Avatar for Lara Hogan lara
189
15k
10 Git Anti Patterns You Should be Aware of
Avatar for Lemi Orhan Ergin lemiorhan
PRO
657
61k
Building Adaptive Systems
Avatar for Chris Keathley keathley
43
2.8k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
271
21k
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
173
14k
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
6.2k
It's Worth the Effort
Avatar for 3n 3n
187
28k
Balancing Empowerment & Direction
Avatar for Lara Hogan lara
4
670

Transcript

  1. METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING By: Tushar

    Verma

  2. WHOAMI Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter

  3. AGENDA What is Bug Bounty Hunting Bug Bounty Platform Scope

    Review and Target Selection Recon Methodologies Manual Testing Approach

  4. WHAT IS BUG BOUNTY HUNTING

  5. Bug Bounty Platform Bugcrowd Hackerone Intigriti YesWeHack HackenProof Cesspa Synack

    Private Programs

  6. Scope Review and Target Selection Check the Description and Focus

    Area Check the In-Scope and Out-scope of the target Check the average response time Check the pay-out and How many vulnerabilities reported

  7. Recon Methodologies Small Scope Recon – Specific sets of single

    URLs Medium Scope Recon - Specific set of “*.target.com” Large Scope Recon – Everything in Scope

  8. Automating Recon Project Bheem ReconFTW Osmedeus

  9. MANUAL TESTING APPROACH

  10. GET IN TOUCH AT ◦ Twitter: @e11i0t_4lders0n ◦ LinkedIn: /in/tushars25

    ◦ Instagram: @e11i0t_4lders0n__ ◦ Email: [email protected]