Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hunting Bugs In Real Life

akshat singhal
September 23, 2020
Technology
0
92

Hunting Bugs In Real Life

akshat singhal

September 23, 2020
Tweet

Other Decks in Technology

See All in Technology
Cloud Native PG 使ってみて気づいたことと最新機能の紹介 - 第52回PostgreSQLアンカンファレンス
seinoyu
2
250
20250328_OpenAI製DeepResearchは既に一種のAGIだと思う話
doradora09
PRO
0
170
PostgreSQL Unconference #52 pg_tde
nori_shinoda
1
250
お問い合わせ対応の改善取り組みとその進め方
masartz
1
560
チームビルディング「脅威モデリング」ワークショップ
koheiyoshikawa
0
180
バックエンド留学した話/Backend study abroad story
kaonavi
0
120
テキスト解析で見る PyCon APAC 2025 セッション＆スピーカートレンド分析
negi111111
0
250
30 代子育て SRE が考える SRE ナレッジマネジメントの現在と将来
kworkdev
PRO
0
170
17年のQA経験が導いたスクラムマスターへの道 / 17 Years in QA to Scrum Master
toma_sm
0
490
新卒1年目のフロントエンド開発での取り組み/New grad front-end efforts
kaonavi
0
130
Tirez profit de Messenger pour améliorer votre architecture
tucksaun
1
180
大規模サービスにおける カスケード障害
takumiogawa
3
760

Featured

See All Featured
Fireside Chat
paigeccino
37
3.4k
How GitHub (no longer) Works
holman
314
140k
Building Adaptive Systems
keathley
41
2.5k
Making the Leap to Tech Lead
cromwellryan
133
9.2k
Bootstrapping a Software Product
garrettdimon
PRO
307
110k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
mongodb
45
9.5k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
118
51k
A Modern Web Designer's Workflow
chriscoyier
693
190k
How To Stay Up To Date on Web Technology
chriscoyier
790
250k
Code Review Best Practice
trishagee
67
18k
The Illustrated Children's Guide to Kubernetes
chrisshort
48
49k
For a Future-Friendly Web
brad_frost
176
9.6k

Transcript

  1. None

  2. BUG BOUNTY WEBINAR

  3. HUNTING BUGS IN REAL LIFE Akshat Singhal

  4. Who am I • Bug crowd Top 700 Researcher –

    All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner

  5. @Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999

  6. None
  7. None
  8. None

  9. STORED DOM REFLECTED

  10. None
  11. None

  12. SQL injection is a web security vulnerability that allows an

    attacker to interfere with the queries that an application makes to its database.

  13. ▪ admin’—

  14. None
  15. None

  16. TYPES HORIZONTAL VERTICAL

  17. None
  18. None
  19. None

  20.  CSRF + XSS --> Account Takeover  User enum.

    + IDOR --> All users compromise
  21. None

  22.          

  23. None