Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

METHODOLOGIES AND APPROACH TO START BUG BOUNTY ...

Avatar for Tushar Verma Tushar Verma
July 25, 2021
Technology
630
0

METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING

Avatar for Tushar Verma

Tushar Verma

July 25, 2021

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
240
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
740
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2.1k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.2k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.8k
The Bug Hunter’s Recon Methodology
Avatar for Tushar Verma e11i0t_4lders0n
2
810
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.4k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
520

Other Decks in Technology

See All in Technology
おそらく日本で唯一のDevRelインターン生として
Avatar for husensan husengs7
0
170
あなたの知らないAmazon VPC Route Server／Amazon VPC Route Server you don't know about
Avatar for モブエンジニア（Masaki Okuda） masakiokuda
2
220
スキルを作る、その前に！複数人で使われるスキルを 作るためのプロセス
Avatar for Junki Furukawa junkifurukawa
2
270
転んだ話が背中を預ける理由になる / A_story_about_falling_down_gives_you_a_reason_to_watch_each_other_s_backs.pdf
Avatar for Pauli pauli
3
210
ai_cording_with_k8s_knowledge.pdf
Avatar for mochizuki875 mochizuki875
1
280
Snapshot Testing in Practice: Predictable and Reliable SwiftUI Views
Avatar for Felipe Espinoza fespinoza
0
120
AIは爆速なのに、私が詰まっていた話 ― 音声入力と鳴くマスコットでボトルネックを削る
Avatar for Yuuki Yamashita yama3133
0
520
Swap and Memory Reclaim - Squeezing Out More RAM
Avatar for Kernel Recipes ennael
PRO
1
1.6k
SREでアラート疲れを 解決しよう！
Avatar for KairiM kairim0
1
200
The seven pitfalls of AI (revised version)
Avatar for Uwe Friedrichsen ufried
0
260
ミイダス株式会社 テックチームのご紹介 / MIIDAS Tech Team
Avatar for ミイダス miidas
0
150
Snowflake Horizon Catalog と Apache Iceberg で作る オープンなデータ基盤
Avatar for キタガワ kitagawaz
0
440

Featured

See All Featured
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.9k
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
4
53k
Kristin Tynski - Automating Marketing Tasks With AI
Avatar for Tech SEO Connect techseoconnect
PRO
0
540
Leo the Paperboy
Avatar for Maya Tellez mayatellez
10
2.3k
Code Reviewing Like a Champion
Avatar for maltzj maltzj
528
40k
Marketing Yourself as an Engineer | Alaka | Gurzu
Avatar for Gurzu gurzu
0
320
How to Build an AI Search Optimization Roadmap - Criteria and Steps to Take #SEOIRL
Avatar for Aleyda Solis aleyda
1
2.2k
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
5.2M
Six Lessons from altMBA
Avatar for Skipper Chong Warson skipperchong
29
4.5k
Designing for Timeless Needs
Avatar for Cassini Nazir cassininazir
1
520
Leadership Guide Workshop - DevTernity 2021
Avatar for David Neal reverentgeek
1
380
Writing Fast Ruby
Avatar for Erik Berlin sferik
630
63k

Transcript

  1. METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING By: Tushar

    Verma

  2. WHOAMI Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter

  3. AGENDA What is Bug Bounty Hunting Bug Bounty Platform Scope

    Review and Target Selection Recon Methodologies Manual Testing Approach

  4. WHAT IS BUG BOUNTY HUNTING

  5. Bug Bounty Platform Bugcrowd Hackerone Intigriti YesWeHack HackenProof Cesspa Synack

    Private Programs

  6. Scope Review and Target Selection Check the Description and Focus

    Area Check the In-Scope and Out-scope of the target Check the average response time Check the pay-out and How many vulnerabilities reported

  7. Recon Methodologies Small Scope Recon – Specific sets of single

    URLs Medium Scope Recon - Specific set of “*.target.com” Large Scope Recon – Everything in Scope

  8. Automating Recon Project Bheem ReconFTW Osmedeus

  9. MANUAL TESTING APPROACH

  10. GET IN TOUCH AT ◦ Twitter: @e11i0t_4lders0n ◦ LinkedIn: /in/tushars25

    ◦ Instagram: @e11i0t_4lders0n__ ◦ Email: [email protected]