Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Bug Bounty: Do and Don’t

Avatar for Raden Ardiansyah Natakusumah Raden Ardiansyah Natakusumah
August 30, 2019
Technology
68
0

Bug Bounty: Do and Don’t

Avatar for Raden Ardiansyah Natakusumah

Raden Ardiansyah Natakusumah

August 30, 2019

More Decks by Raden Ardiansyah Natakusumah

See All by Raden Ardiansyah Natakusumah
Security stories in online payment company
Avatar for Raden Ardiansyah Natakusumah rully
0
31
Protect your business with PCI DSS
Avatar for Raden Ardiansyah Natakusumah rully
0
47
Intrusion Prevention System based on Machine Learning
Avatar for Raden Ardiansyah Natakusumah rully
0
170
PCI DSS Security Awareness
Avatar for Raden Ardiansyah Natakusumah rully
0
170

Other Decks in Technology

See All in Technology
Benchmarking Disaggregated Serving on vLLM + Dynamo with a Real Coding-Agent Workload
Avatar for NTT docomo Business nttcom
1
190
Post AI時代のリファクタリング実践記 / Refactoring in the post AI era
Avatar for 株式会社カミナシ kaminashi
1
230
触りたくないデータに、どう触るか AI時代のRBACアクセスガバナンス
Avatar for 株式会社IVRy（社員登壇資料） ivry_presentationmaterials
0
260
大型犬好きによるPugの紹介
Avatar for yamanoku yamanoku
1
160
JAWS-UGグッズ職人仕事の流儀
Avatar for Hiroo Katoh kentapapa
0
100
hackers_champloo_2026_tidb
Avatar for makocchi makocchi
0
160
OptunaHub: ブラックボックス最適化のためのプラットフォーム
Avatar for Preferred Networks pfn
PRO
0
140
WasmをRustにする
Avatar for SansanTech sansantech
PRO
0
250
DGX Spark でどこまでハッキングができるのか？
Avatar for kash1064 kash1064
3
1.3k
Getting Started with Google Antigravity
Avatar for Guillaume Laforge glaforge
0
310
会社説明資料
Avatar for パーソル＆サーバーワークス株式会社 persolserverworks
0
9.8k
10年後、Engineering 行為を剥奪されるとして、わたしたちは、どう、何を創ればいいだろうか。 / If Engineering Is Taken Away in 10 Years, How and What Should We Create?
Avatar for 株式会社ビットキー / Bitkey Inc. bitkey
PRO
1
190

Featured

See All Featured
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
2.2k
Keith and Marios Guide to Fast Websites
Avatar for Keith Pitt keithpitt
413
23k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
10k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
53
4k
The Spectacular Lies of Maps
Avatar for Per Axbom axbom
PRO
1
1.1k
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1033
470k
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
Avatar for Umar Saidu Auna auna
0
320
How Software Deployment tools have changed in the past 20 years
Avatar for Geshan Manandhar geshan
2
35k
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
57
14k
SEO Brein meetup: CTRL+C is not how to scale international SEO
Avatar for Linda Hogenes lindahogenes
2
2.9k
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
46
8.3k
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
360

Transcript

  1. None

  2. Bug Bounty: Do and Don’t @r_u_l_l_y For Educational Purpose Only

  3. None

  4. https://about.me/r_u_l_l_y

  5. Bug bounty

  6. February 2019

  7. None
  8. None

  9. Bug report

  10. Bounty hunters

  11. None
  12. None

  13. Previous reports

  14. Duplicate

  15. They report

  16. E-mail

  17. Private chat

  18. Customer care

  19. The form

  20. Text

  21. Screenshots

  22. Docx

  23. PDF

  24. Video

  25. From all of that

  26. One

  27. None

  28. Sample cases

  29. None
  30. None

  31. 6 minutes later

  32. None
  33. None
  34. None
  35. None

  36. Proper report

  37. Description

  38. Impact

  39. Recommendation

  40. Severity

  41. OWASP Risk Rating

  42. CVSS v3.1

  43. Proof of Concept

  44. Bug bounty program?

  45. None

  46. Want to report?

  47. [email protected]

  48. Thank you