Upgrade to PRO for Only $50/Year—Limited-Time Offer! 🔥

The Bug Hunter’s Recon Methodology

Avatar for Tushar Verma Tushar Verma
August 08, 2021
Technology
2
790

The Bug Hunter’s Recon Methodology

Avatar for Tushar Verma

Tushar Verma

August 08, 2021
Tweet

More Decks by Tushar Verma

See All by Tushar Verma
The Power of Recon_ Leveraging Recon for Easy $$$$
Avatar for Tushar Verma e11i0t_4lders0n
0
200
AWS Cloud Forensics & Incident Response
Avatar for Tushar Verma e11i0t_4lders0n
1
700
Hacking OAuth Applications
Avatar for Tushar Verma e11i0t_4lders0n
1
2.1k
Exploiting SSRF like a Boss
Avatar for Tushar Verma e11i0t_4lders0n
2
1.1k
How to Fail at Bug Bounty Hunting
Avatar for Tushar Verma e11i0t_4lders0n
1
1.7k
METHODOLOGIES AND APPROACH TO START BUG BOUNTY HUNTING
Avatar for Tushar Verma e11i0t_4lders0n
0
600
Bypassing 2FA Misconfiguration
Avatar for Tushar Verma e11i0t_4lders0n
1
2.3k
How to get started in bug bounty
Avatar for Tushar Verma e11i0t_4lders0n
1
500

Other Decks in Technology

See All in Technology
【開発を止めるな】機能追加と並行して進めるアーキテクチャ改善/Keep Shipping: Architecture Improvements Without Pausing Dev
Avatar for 株式会社ビットキー / Bitkey Inc. bitkey
PRO
1
120
【U/Day Tokyo 2025】Cygames流 最新スマートフォンゲームの技術設計 〜『Shadowverse: Worlds Beyond』におけるアーキテクチャ再設計の挑戦～
Avatar for Cygames cygames
PRO
2
1.5k
20251219 OpenIDファウンデーション・ジャパン紹介 / OpenID Foundation Japan Intro
Avatar for OpenID Foundation Japan oidfj
0
480
20251222_next_js_cache__1_.pdf
Avatar for sutetotanuki sutetotanuki
0
170
MariaDB Connector/C のcaching_sha2_passwordプラグインの仕様について
Avatar for kubo ayumu boro1234
0
1k
通勤手当申請チェックエージェント開発のリアル
Avatar for WHIsaiyo whisaiyo
3
440
20251218_AIを活用した開発生産性向上の全社的な取り組みの進め方について / How to proceed with company-wide initiatives to improve development productivity using AI
Avatar for yayoi_dd yayoi_dd
0
650
日本Rubyの会: これまでとこれから
Avatar for Koji SHIMADA snoozer05
PRO
5
230
AI with TiDD
Avatar for Shiraji shiraji
1
270
Kiro を用いたペアプロのススメ
Avatar for Taiki Sugawara taikis
4
1.6k
子育てで想像してなかった「見えないダメージ」 / Unforeseen "hidden burdens" of raising children.
Avatar for Pauli pauli
2
320
Authlete で実装する MCP OAuth 認可サーバー #CIMD の実装を添えて
Avatar for watahani watahani
0
160

Featured

See All Featured
JAMstack: Web Apps at Ludicrous Speed - All Things Open 2022
Avatar for David Neal reverentgeek
1
290
Measuring & Analyzing Core Web Vitals
Avatar for Philip Tellis bluesmoon
9
710
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
0
120
B2B Lead Gen: Tactics, Traps & Triumph
Avatar for Sophie Logan marketingsoph
0
32
Organizational Design Perspectives: An Ontology of Organizational Design Elements
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
44
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
1
25
AI in Enterprises - Java and Open Source to the Rescue
Avatar for ivargrimstad ivargrimstad
0
1k
Embracing the Ebb and Flow
Avatar for Simon Collison colly
88
4.9k
Claude Code のすすめ
Avatar for schroneko schroneko
65
200k
Unlocking the hidden potential of vector embeddings in international SEO
Avatar for Frank van Dijk frankvandijk
0
130
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
57
37k
The untapped power of vector embeddings
Avatar for Frank van Dijk frankvandijk
1
1.5k

Transcript

  1. The Bug Hunter’s Recon Methodology By: Tushar Verma

  2. Whoami Application Security Engineer Synack Red Team Member Bug Bounty

    Hunter Infosec Trainer & Speaker

  3. Agenda Scope Review for any program Before Recon After Recon

    Scope- based Recon Basic Methodolog y Tools and Automation frameworks

  4. Scope review for any program • Assets • No of

    reports resolved • Payout • Time to triage and Time to Bounty

  5. Before Recon • Company name • Available scope • Overview

    about the company business • Information from program page related to security purposes

  6. After recon • Service info • Backend technology used •

    Interesting Endpoints • Juicy links which may be vulnerable • More and more

  7. Scope based recon • Small Scope Target-Single URL like domain

    and subdomain(Ex. evil.com , info.evil.com • Medium Scope Target-Lists of subdomains(Ex. *.evil.com) • Large Scope Target-All website related to company is in scope

  8. Basic Methodology Target : *.evil.com

  9. Tools and Automation Framework ReconF TW Project Bheem Osmed eus

  10. Get in touch at • Twitter: @e11i0t_4lders0n • LinkedIn: /in/tushars25

    • Instagram: @e11i0t_4lders0n__ • Email: [email protected]

  11. Thank you