Upgrade to Pro — share decks privately, control downloads, hide ads and more …

METHODOLOGIES AND APPROACH TO START BUG BOUNTY ...

Avatar for Tushar Verma Tushar Verma
July 25, 2021
Technology
0
580

METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING

Avatar for Tushar Verma

Tushar Verma

July 25, 2021
Tweet

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
180
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
680
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.1k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.7k
The Bug Hunter’s Recon Methodology
Avatar for Tushar Verma e11i0t_4lders0n
2
770
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.3k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
490

Other Decks in Technology

See All in Technology
生成AI利用プログラミング：誰でもプログラムが書けると 世の中どうなる？/opencampus202508
Avatar for Oka Natsuki okana2ki
0
180
Preferred Networks (PFN) とLLM Post-Training チームの紹介 / 第4回 関東Kaggler会 スポンサーセッション
Avatar for Preferred Networks pfn
PRO
1
130
Amazon Inspector コードセキュリティで手軽に実現するシフトレフト
Avatar for mai miya maimyyym
0
160
AIは変更差分からユニットテスト_結合テスト_システムテストでテストすべきことが出せるのか？
Avatar for Matsu mineo_matsuya
5
3.1k
リモートワークで心掛けていること 〜AI活用編〜
Avatar for naoki85 naoki85
0
200
LLMエージェント時代に適応した開発フロー
Avatar for Yuya Hirayama hiragram
1
330
広島発！スタートアップ開発の裏側
Avatar for Sankyo Toshio tsankyo
0
170
メルカリIBIS：AIが拓く次世代インシデント対応
Avatar for ktykogm 0gm
2
500
OCI Bastionサービス
Avatar for oracle4engineer oracle4engineer
PRO
1
100
kintone開発チームの紹介
Avatar for Cybozu cybozuinsideout
PRO
0
73k
プロジェクトマネジメントは不確実性との対話だ
Avatar for HisashiWatanabe hisashiwatanabe
0
190
datadog-distribution-of-opentelemetry-collector-intro
Avatar for tetsuya28 tetsuya28
0
220

Featured

See All Featured
Done Done
Avatar for chrislema chrislema
185
16k
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
6.5k
Designing for humans not robots
Avatar for Tammie Lister tammielis
253
25k
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
179
9.9k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
110
20k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
Avatar for Stéphanie Walter stephaniewalter
283
13k
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1031
460k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
Avatar for Joe Casabona jcasabona
33
2.4k
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
4k
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
50
5.5k
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
347
40k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
231
18k

Transcript

  1. METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING By: Tushar

    Verma

  2. WHOAMI Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter

  3. AGENDA What is Bug Bounty Hunting Bug Bounty Platform Scope

    Review and Target Selection Recon Methodologies Manual Testing Approach

  4. WHAT IS BUG BOUNTY HUNTING

  5. Bug Bounty Platform Bugcrowd Hackerone Intigriti YesWeHack HackenProof Cesspa Synack

    Private Programs

  6. Scope Review and Target Selection Check the Description and Focus

    Area Check the In-Scope and Out-scope of the target Check the average response time Check the pay-out and How many vulnerabilities reported

  7. Recon Methodologies Small Scope Recon – Specific sets of single

    URLs Medium Scope Recon - Specific set of “*.target.com” Large Scope Recon – Everything in Scope

  8. Automating Recon Project Bheem ReconFTW Osmedeus

  9. MANUAL TESTING APPROACH

  10. GET IN TOUCH AT ◦ Twitter: @e11i0t_4lders0n ◦ LinkedIn: /in/tushars25

    ◦ Instagram: @e11i0t_4lders0n__ ◦ Email: [email protected]