Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Bug Bounty: Do and Don’t

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Raden Ardiansyah Natakusumah Raden Ardiansyah Natakusumah
August 30, 2019
Technology
0
62

Bug Bounty: Do and Don’t

Avatar for Raden Ardiansyah Natakusumah

Raden Ardiansyah Natakusumah

August 30, 2019
Tweet

More Decks by Raden Ardiansyah Natakusumah

See All by Raden Ardiansyah Natakusumah
Security stories in online payment company
Avatar for Raden Ardiansyah Natakusumah rully
0
26
Protect your business with PCI DSS
Avatar for Raden Ardiansyah Natakusumah rully
0
42
Intrusion Prevention System based on Machine Learning
Avatar for Raden Ardiansyah Natakusumah rully
0
160
PCI DSS Security Awareness
Avatar for Raden Ardiansyah Natakusumah rully
0
160

Other Decks in Technology

See All in Technology
OpenShiftでllm-dを動かそう！
Avatar for jpishikawa jpishikawa
0
110
20260204_Midosuji_Tech
Avatar for Takuya Yonezawa takuyay0ne
1
150
Introduction to Sansan for Engineers / エンジニア向け会社紹介
Avatar for Sansan, Inc. sansan33
PRO
6
68k
マーケットプレイス版Oracle WebCenter Content For OCI
Avatar for oracle4engineer oracle4engineer
PRO
5
1.6k
超初心者からでも大丈夫！オープンソース半導体の楽しみ方〜今こそ！オレオレチップをつくろう〜
Avatar for Yamada3 keropiyo
0
110
Embedded SREの終わりを設計する　「なんとなく」から計画的な自立支援へ
Avatar for SansanTech sansantech
PRO
3
2.4k
2026年、サーバーレスの現在地 -「制約と戦う技術」から「当たり前の実行基盤」へ- /serverless2026
Avatar for Serverless Operations slsops
2
240
Tebiki Engineering Team Deck
Avatar for Tebiki, Inc. tebiki
0
24k
データの整合性を保ちたいだけなんだ
Avatar for ShoheiMitani shoheimitani
8
3.1k
Codex 5.3 と Opus 4.6 にコーポレートサイトを作らせてみた / Codex 5.3 vs Opus 4.6
Avatar for ama-ch ama_ch
0
150
今日から始める Amazon Bedrock AgentCore
Avatar for Har1101 har1101
4
410
20260208_第66回 コンピュータビジョン勉強会
Avatar for KeiichiIto1978 keiichiito1978
0
130

Featured

See All Featured
Balancing Empowerment & Direction
Avatar for Lara Hogan lara
5
890
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
17k
Digital Ethics as a Driver of Design Innovation
Avatar for Per Axbom axbom
PRO
1
180
Conquering PDFs: document understanding beyond plain text
Avatar for Ines Montani inesmontani
PRO
4
2.3k
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
9.5k
How to optimise 3,500 product descriptions for ecommerce in one day using ChatGPT
Avatar for Katarina Dahlin katarinadahlin
PRO
0
3.4k
Stewardship and Sustainability of Urban and Community Forests
Avatar for Eric Wiseman pwiseman
0
110
Efficient Content Optimization with Google Search Console & Apps Script
Avatar for Katarina Dahlin katarinadahlin
PRO
1
320
Jess Joyce - The Pitfalls of Following Frameworks
Avatar for Tech SEO Connect techseoconnect
PRO
1
65
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
Avatar for soudai sone soudai
PRO
196
71k
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
0
46k

Transcript

  1. None

  2. Bug Bounty: Do and Don’t @r_u_l_l_y For Educational Purpose Only

  3. None

  4. https://about.me/r_u_l_l_y

  5. Bug bounty

  6. February 2019

  7. None
  8. None

  9. Bug report

  10. Bounty hunters

  11. None
  12. None

  13. Previous reports

  14. Duplicate

  15. They report

  16. E-mail

  17. Private chat

  18. Customer care

  19. The form

  20. Text

  21. Screenshots

  22. Docx

  23. PDF

  24. Video

  25. From all of that

  26. One

  27. None

  28. Sample cases

  29. None
  30. None

  31. 6 minutes later

  32. None
  33. None
  34. None
  35. None

  36. Proper report

  37. Description

  38. Impact

  39. Recommendation

  40. Severity

  41. OWASP Risk Rating

  42. CVSS v3.1

  43. Proof of Concept

  44. Bug bounty program?

  45. None

  46. Want to report?

  47. [email protected]

  48. Thank you