The Bug Hunter’s Recon Methodology

Transcript

1. The Bug Hunter’s Recon Methodology By: Tushar Verma
2. Whoami Application Security Engineer Synack Red Team Member Bug Bounty Hunter Infosec Trainer & Speaker
3. Agenda Scope Review for any program Before Recon After Recon Scope- based Recon Basic Methodolog y Tools and Automation frameworks
4. Scope review for any program • Assets • No of reports resolved • Payout • Time to triage and Time to Bounty
5. Before Recon • Company name • Available scope • Overview about the company business • Information from program page related to security purposes
6. After recon • Service info • Backend technology used • Interesting Endpoints • Juicy links which may be vulnerable • More and more
7. Scope based recon • Small Scope Target-Single URL like domain and subdomain(Ex. evil.com , info.evil.com • Medium Scope Target-Lists of subdomains(Ex. *.evil.com) • Large Scope Target-All website related to company is in scope
8. Basic Methodology Target : *.evil.com
9. Tools and Automation Framework ReconF TW Project Bheem Osmed eus
10. Get in touch at • Twitter: @e11i0t_4lders0n • LinkedIn: /in/tushars25 • Instagram: @e11i0t_4lders0n__ • Email: tushar.infosec@gmail.com
11. Thank you