Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Bug Hunter’s Recon Methodology

Avatar for Tushar Verma Tushar Verma
August 08, 2021
Technology
2
780

The Bug Hunter’s Recon Methodology

Avatar for Tushar Verma

Tushar Verma

August 08, 2021
Tweet

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
190
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
690
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.1k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.7k
METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING
Avatar for Tushar Verma e11i0t_4lders0n
0
580
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.3k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
490

Other Decks in Technology

See All in Technology
Redux → Recoil → Zustand → useSyncExternalStore： 状態管理の10年とReact本来の姿
Avatar for ZOZO Developers zozotech
PRO
6
3.3k
設計は最強のプロンプト - AI時代に武器にすべきスキルとは？-
Avatar for Ken'ichirou Kimura kenichirokimura
1
350
AI時代におけるドメイン駆動設計 入門 / Introduction to Domain-Driven Design in the AI ​​Era
Avatar for Futoshi Endo fendo181
0
670
バグと向き合い、仕組みで防ぐ
Avatar for rina ____rina____
0
250
ステートレスなLLMでステートフルなAI agentを作る - YAPC::Fukuoka 2025
Avatar for FUJI Goro gfx
2
560
CDKの魔法を少し解いてみる ― synth・build・diffで覗くIaCの裏側 ―
Avatar for Nagai Takafumi takahumi27
1
140
Copilotの精度を上げる！カスタムプロンプト入門.pdf
Avatar for Izumu KUSUNOKI ismk
10
3.3k
エンジニアに定年なし！ AI時代にキャリアをReboot — 学び続けて未来を創る
Avatar for JunjiKoide junjikoide
0
180
Flutter DevToolsで発見！ 本番アプリのパフォーマンス問題と改善の実践
Avatar for GOTO-TSL goto_tsl
1
370
Dart and Flutter MCP serverで実現する AI駆動E2Eテスト整備と自動操作
Avatar for Yuki Sakai yukisakai1225
0
350
AIエージェントは「使う」だけじゃなくて「作る」時代！ 〜最新フレームワークで楽しく開発入門しよう〜
Avatar for みのるん minorun365
11
1.6k
日々のSlackアラート確認運用をCustom Chat Modesで楽にした話 / 日々のSlackアラート確認運用をCustom Chat Modesで楽にした話
Avatar for Imamoto Hikaru imamotohikaru
0
440

Featured

See All Featured
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
36
6.1k
Music & Morning Musume
Avatar for Bryan Veloso bryan
46
6.9k
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
333
22k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
118
20k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
9.7k
XXLCSS - How to scale CSS and keep your sanity
Avatar for Zaharenia Atzitzikaki sugarenia
249
1.3M
Fashionably flexible responsive web design (full day workshop)
Avatar for Andy Clarke malarkey
407
66k
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
231
54k
A designer walks into a library…
Avatar for Paul Jervis Heath pauljervisheath
210
24k
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
57
6k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
333
24k

Transcript

  1. The Bug Hunter’s Recon Methodology By: Tushar Verma

  2. Whoami Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter Infosec Trainer & Speaker

  3. Agenda Scope Review for any program Before Recon After Recon

    Scope- based Recon Basic Methodolog y Tools and Automation frameworks

  4. Scope review for any program • Assets • No of

    reports resolved • Payout • Time to triage and Time to Bounty

  5. Before Recon • Company name • Available scope • Overview

    about the company business • Information from program page related to security purposes

  6. After recon • Service info • Backend technology used •

    Interesting Endpoints • Juicy links which may be vulnerable • More and more

  7. Scope based recon • Small Scope Target-Single URL like domain

    and subdomain(Ex. evil.com , info.evil.com • Medium Scope Target-Lists of subdomains(Ex. *.evil.com) • Large Scope Target-All website related to company is in scope

  8. Basic Methodology Target : *.evil.com

  9. Tools and Automation Framework ReconF TW Project Bheem Osmed eus

  10. Get in touch at • Twitter: @e11i0t_4lders0n • LinkedIn: /in/tushars25

    • Instagram: @e11i0t_4lders0n__ • Email: [email protected]

  11. Thank you