Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hunting Bugs In Real Life

akshat singhal
September 23, 2020
Technology
0
89

Hunting Bugs In Real Life

akshat singhal

September 23, 2020
Tweet

Other Decks in Technology

See All in Technology
2024AWSで個人的にアツかったアップデート
nagisa53
1
110
メンバーがオーナーシップを発揮しやすいチームづくり
ham0215
2
140
embedパッケージを深掘りする / Deep Dive into embed Package in Go
task4233
1
220
あなたの人生も変わるかも？AWS認定2つで始まったウソみたいな話
iwamot
3
860
Git scrapingで始める継続的なデータ追跡 / Git Scraping
ohbarye
5
500
Cloudflareで実現する AIエージェント ワークフロー基盤
kmd09
0
290
#TRG24 / David Cuartielles / Post Open Source
tarugoconf
0
590
2025年の挑戦 コーポレートエンジニアの技術広報/techpr5
nishiuma
0
140
Visual StudioとかIDE関連小ネタ話
kosmosebi
1
380
カップ麺の待ち時間(3分)でわかるPartyRockアップデート
ryutakondo
0
140
Azureの開発で辛いところ
re3turn
0
240
comilioとCloudflare、そして未来へと向けて
oliver_diary
6
450

Featured

See All Featured
Embracing the Ebb and Flow
colly
84
4.5k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
29
960
VelocityConf: Rendering Performance Case Studies
addyosmani
327
24k
Done Done
chrislema
182
16k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
173
51k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
98
18k
Why You Should Never Use an ORM
jnunemaker
PRO
54
9.1k
Site-Speed That Sticks
csswizardry
3
270
Building Flexible Design Systems
yeseniaperezcruz
328
38k
The Art of Delivering Value - GDevCon NA Keynote
reverentgeek
8
1.2k
For a Future-Friendly Web
brad_frost
176
9.5k
GraphQLの誤解/rethinking-graphql
sonatard
68
10k

Transcript

  1. None

  2. BUG BOUNTY WEBINAR

  3. HUNTING BUGS IN REAL LIFE Akshat Singhal

  4. Who am I • Bug crowd Top 700 Researcher –

    All Time • Blogger • Bug Bounty Hunter • Speaker • Lifelong learner

  5. @Akshat05623019 @akshat-singhal-90141716b @honeyakshat999 Get In Touch At @AkshatSinghal1 @AkshatSinghal @honeyakshat999

  6. None
  7. None
  8. None

  9. STORED DOM REFLECTED

  10. None
  11. None

  12. SQL injection is a web security vulnerability that allows an

    attacker to interfere with the queries that an application makes to its database.

  13. ▪ admin’—

  14. None
  15. None

  16. TYPES HORIZONTAL VERTICAL

  17. None
  18. None
  19. None

  20.  CSRF + XSS --> Account Takeover  User enum.

    + IDOR --> All users compromise
  21. None

  22.          

  23. None