Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

METHODOLOGIES AND APPROACH TO START BUG BOUNTY ...

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Tushar Verma Tushar Verma
July 25, 2021
Technology
630
0

METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING

Avatar for Tushar Verma

Tushar Verma

July 25, 2021

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
240
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
750
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2.1k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.2k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.8k
The Bug Hunter’s Recon Methodology
Avatar for Tushar Verma e11i0t_4lders0n
2
810
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.4k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
530

Other Decks in Technology

See All in Technology
Adversary Infrastructure Hunting101
Avatar for DiscoNinja disconinja
0
160
CSS2026：OWS研究会・招待講演「世界観を、実装する」
Avatar for atsushi, sada atsush1_sada
2
330
ドメインエキスパートは いかにして AI を使って プロダクト開発をするか
Avatar for tshiraishi tatsuyashiraishi
1
190
演劇と私とスクラム
Avatar for Tomonori Fukuta chinmo
0
160
顧客価値を追いかけたら、プライシングにたどり着いた
Avatar for SansanTech sansantech
PRO
2
1k
Microsoft のサポート ライフサイクルを理解する
Avatar for Murachi Akira murachiakira
PRO
0
210
AIで選択肢が広がった組織設計の理想と現実
Avatar for konifar konifar
12
4.6k
ポケモン対戦を自動で記録して振り返ろう
Avatar for Yusuke Fukasawa fufufukakaka
0
400
DevelopersIO 2026 Tokyo 現時点の衛星通信サービスの現状を整理してみる
Avatar for maroon1st maroon1st
0
310
AWS DevOps Agentはどこまで任せられるか 〜機能の現在地と、機能拡張の実践〜
Avatar for nyankotaro nyankotaro
0
240
導入から定着へ ~コーディングエージェントを日常業務に組み込む実践知~
Avatar for Yuki Sakai yukisakai1225
0
230
「作れる」と「リリースできる」の間にあったもの── PdMを外して見えた、PdMがやるべき仕事/Buildable ≠ Shippable: What Removing the PM Taught Me About the PM’s Job
Avatar for Yappli Developers yappli_developers
0
270

Featured

See All Featured
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
666
130k
What does AI have to do with Human Rights?
Avatar for Per Axbom axbom
PRO
1
2.5k
Kristin Tynski - Automating Marketing Tasks With AI
Avatar for Tech SEO Connect techseoconnect
PRO
0
560
Learning to Love Humans: Emotional Interface Design
Avatar for Aarron Walter aarron
275
41k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
9
1.6k
Visual Storytelling: How to be a Superhuman Communicator
Avatar for David Neal reverentgeek
2
720
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
508
140k
SEO for Brand Visibility & Recognition
Avatar for Aleyda Solis aleyda
0
4.8k
The SEO identity crisis: Don't let AI make you average
Avatar for Varn varn
0
610
Art, The Web, and Tiny UX
Avatar for Lynn Fisher lynnandtonic
304
22k
Odyssey Design
Avatar for Ryan Kendrick rkendrick25
PRO
2
890
CSS Pre-Processors: Stylus, Less & Sass
Avatar for Bermon Painter bermonpainter
360
31k

Transcript

  1. METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING By: Tushar

    Verma

  2. WHOAMI Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter

  3. AGENDA What is Bug Bounty Hunting Bug Bounty Platform Scope

    Review and Target Selection Recon Methodologies Manual Testing Approach

  4. WHAT IS BUG BOUNTY HUNTING

  5. Bug Bounty Platform Bugcrowd Hackerone Intigriti YesWeHack HackenProof Cesspa Synack

    Private Programs

  6. Scope Review and Target Selection Check the Description and Focus

    Area Check the In-Scope and Out-scope of the target Check the average response time Check the pay-out and How many vulnerabilities reported

  7. Recon Methodologies Small Scope Recon – Specific sets of single

    URLs Medium Scope Recon - Specific set of “*.target.com” Large Scope Recon – Everything in Scope

  8. Automating Recon Project Bheem ReconFTW Osmedeus

  9. MANUAL TESTING APPROACH

  10. GET IN TOUCH AT ◦ Twitter: @e11i0t_4lders0n ◦ LinkedIn: /in/tushars25

    ◦ Instagram: @e11i0t_4lders0n__ ◦ Email: [email protected]