Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Hunting Bugs In Real Life

Avatar for akshat singhal akshat singhal
September 23, 2020
Technology
120
0

Hunting Bugs In Real Life

Avatar for akshat singhal

akshat singhal

September 23, 2020

Other Decks in Technology

See All in Technology
React改造してみた
Avatar for Mooncake Sugar tsukina_7mochi
0
160
「作れる」と「リリースできる」の間にあったもの── PdMを外して見えた、PdMがやるべき仕事/Buildable ≠ Shippable: What Removing the PM Taught Me About the PM’s Job
Avatar for Yappli Developers yappli_developers
0
280
Autonomous AI Lakehouse - Live AI Hubから始めるセキュアなAIデータ活用 -
Avatar for oracle4engineer oracle4engineer
PRO
2
150
AWS Continuum for Penetration Testing に Deep Dive してみる
Avatar for 浅野晴輝 asanoharuki
1
1.3k
AWSDirectConnectの構築の進め方を整理してみた
Avatar for まちや masa_my
1
190
演劇と私とスクラム
Avatar for Tomonori Fukuta chinmo
0
160
dbt Semantic Layerで進めるenechainのデータ民主化
Avatar for Aki Zhou akizhou
1
270
Claude Code をローカルとサーバー上で利用した際の Bedrock 利用料をユーザー単位で一本化してみる
Avatar for Osamu Horiguchi ohorig
0
160
Agent × Maestro で始める モバイル E2E　端末準備からテスト実行・結果確認まで
Avatar for SansanTech sansantech
PRO
0
210
Steerable Visual Representations
Avatar for SansanTech sansantech
PRO
0
440
なぜAI時代に技術記事を書くのか？どう書くのか？ 〜bunの場合〜
Avatar for KNOWLEDGE WORK / 株式会社ナレッジワーク kworkdev
PRO
0
120
プロダクトが成長すると、 プロダクトマネージャーの仕事はどう変わるのか － 「まず作る」から「小さく学び、確かめながら進む」へ
Avatar for SansanTech sansantech
PRO
1
360

Featured

See All Featured
The untapped power of vector embeddings
Avatar for Frank van Dijk frankvandijk
2
2k
Tell your own story through comics
Avatar for letsgokoyo letsgokoyo
1
1.1k
RailsConf 2023
Avatar for Aaron Patterson tenderlove
30
1.6k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
Avatar for Joe Casabona jcasabona
35
2.9k
Self-Hosted WebAssembly Runtime for Runtime-Neutral Checkpoint/Restore in Edge–Cloud Continuum
Avatar for Yuki Nakata chikuwait chikuwait
0
900
SEO Brein meetup: CTRL+C is not how to scale international SEO
Avatar for Linda Hogenes lindahogenes
2
2.9k
How to Grow Your eCommerce with AI & Automation
Avatar for Katarina Dahlin katarinadahlin
PRO
2
330
Agile Actions for Facilitating Distributed Teams - ADO2019
Avatar for Mark Kilby mkilby
0
320
Highjacked: Video Game Concept Design
Avatar for Ryan Kendrick rkendrick25
PRO
1
490
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
10
1.4k
技術選定の審美眼（2025年版） / Understanding the Spiral of Technologies 2025 edition
Avatar for Takuto WADA twada
PRO
120
120k
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
333
23k

Transcript

  1. None

  2. BUG BOUNTY WEBINAR

  3. HUNTING BUGS IN REAL LIFE Akshat Singhal

  4. Who am I • Bug crowd Top 700 Researcher –

    All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner

  5. @Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999

  6. None
  7. None
  8. None

  9. STORED DOM REFLECTED

  10. None
  11. None

  12. SQL injection is a web security vulnerability that allows an

    attacker to interfere with the queries that an application makes to its database.

  13. ▪ admin’—

  14. None
  15. None

  16. TYPES HORIZONTAL VERTICAL

  17. None
  18. None
  19. None

  20.  CSRF + XSS --> Account Takeover  User enum.

    + IDOR --> All users compromise
  21. None

  22.          

  23. None