Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Bug Hunter’s Recon Methodology

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Tushar Verma Tushar Verma
August 08, 2021
Technology
800
2

The Bug Hunter’s Recon Methodology

Avatar for Tushar Verma

Tushar Verma

August 08, 2021

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
230
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
730
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2.1k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.1k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.7k
METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING
Avatar for Tushar Verma e11i0t_4lders0n
0
620
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.4k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
510

Other Decks in Technology

See All in Technology
キャリアの中で本を作る / Making a Book During Your Career
Avatar for akihisa1210 ak1210
0
130
依頼文化をやめる日 EM視点で語るPlatform EngineeringとInclusive SRE / Discussing Platform Engineering and Inclusive SRE from an EM's Perspective
Avatar for katsukamaru shin1988
4
5.1k
プロンプト_きのこカンファレンス2026_LT
Avatar for ゆるふわヒーラー yurufuwahealer
0
150
Baseline対応のDOMの型定義を作った
Avatar for uhyo uhyo
3
730
プライバシー保護の理論と実践
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
1
250
【Claude Code】鹿野さんに聞く 私の推しの並行開発環境 大公開 / claude-code-parallel-2026-07-15
Avatar for tonkotsuboy_com tonkotsuboy_com
9
5.1k
AI Agent SaaS を支える自社仮想化基盤への挑戦と実運用 / ai-agent-saas-virtualization
Avatar for GMO Flatt Security flatt_security
2
3.6k
ADDF - ループエンジニアリングするフレームワークを作ったら/I Didn't Set Out to Build Loop Engineering, But ADDF Did
Avatar for 果物リン fruitriin
0
110
Keeping applications secure by evolving OAuth 2.0 and OpenID Connect
Avatar for Alexander Schwartz ahus1
PRO
1
160
勉強会企画をアプリで構造化してみた 〜そこで見えた、AIとの付き合い方〜 / I've structured a study group plan using an app.
Avatar for Pauli pauli
0
340
KiCAD講習会②
Avatar for TUTものづくりサークル tutcreators
0
100
あなたの『Site』はどこですか？ — xREという考え方
Avatar for miyamu miyamu
0
1.2k

Featured

See All Featured
Test your architecture with Archunit
Avatar for Yoan thirion
1
2.3k
Crafting Experiences
Avatar for Bethany Jepchumba bethany
1
210
Designing for Performance
Avatar for Lara Hogan lara
611
70k
Between Models and Reality
Avatar for mayunak mayunak
4
370
Pawsitive SEO: Lessons from My Dog (and Many Mistakes) on Thriving as a Consultant in the Age of AI
Avatar for David Carrasco davidcarrasco
0
180
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
18k
JAMstack: Web Apps at Ludicrous Speed - All Things Open 2022
Avatar for David Neal reverentgeek
1
490
How to optimise 3,500 product descriptions for ecommerce in one day using ChatGPT
Avatar for Katarina Dahlin katarinadahlin
PRO
1
3.7k
What’s in a name? Adding method to the madness
Avatar for The Alliance productmarketing
PRO
24
4.1k
Keith and Marios Guide to Fast Websites
Avatar for Keith Pitt keithpitt
413
23k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
300
Faster Mobile Websites
Avatar for Dean Hume deanohume
310
32k

Transcript

  1. The Bug Hunter’s Recon Methodology By: Tushar Verma

  2. Whoami Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter Infosec Trainer & Speaker

  3. Agenda Scope Review for any program Before Recon After Recon

    Scope- based Recon Basic Methodolog y Tools and Automation frameworks

  4. Scope review for any program • Assets • No of

    reports resolved • Payout • Time to triage and Time to Bounty

  5. Before Recon • Company name • Available scope • Overview

    about the company business • Information from program page related to security purposes

  6. After recon • Service info • Backend technology used •

    Interesting Endpoints • Juicy links which may be vulnerable • More and more

  7. Scope based recon • Small Scope Target-Single URL like domain

    and subdomain(Ex. evil.com , info.evil.com • Medium Scope Target-Lists of subdomains(Ex. *.evil.com) • Large Scope Target-All website related to company is in scope

  8. Basic Methodology Target : *.evil.com

  9. Tools and Automation Framework ReconF TW Project Bheem Osmed eus

  10. Get in touch at • Twitter: @e11i0t_4lders0n • LinkedIn: /in/tushars25

    • Instagram: @e11i0t_4lders0n__ • Email: [email protected]

  11. Thank you