Upgrade to Pro — share decks privately, control downloads, hide ads and more …

今日から始めるbugbounty

Avatar for kyo_ago kyo_ago
July 23, 2018
Programming
0
290

 今日から始めるbugbounty

Avatar for kyo_ago

kyo_ago

July 23, 2018
Tweet

More Decks by kyo_ago

See All by kyo_ago
フロントエンドの リソース管理の話 TechFeed Summit#1 #techfeed #techfeedsummit
Avatar for kyo_ago kyo_ago
5
2k
TypeScriptでType Match的なことをする話 #すえなみチャンス暑気払い
Avatar for kyo_ago kyo_ago
1
1.3k
WebReplayから見るWeb開発の未来 #builderscon
Avatar for kyo_ago kyo_ago
2
970
karmaを使ったSPA向けE2Eテスト技法
Avatar for kyo_ago kyo_ago
6
5.5k
E2Eという名称の指すもの
Avatar for kyo_ago kyo_ago
0
2.5k
How to use Scala.js in real world?
Avatar for kyo_ago kyo_ago
1
2.1k

Other Decks in Programming

See All in Programming
GUI操作LLMの最新動向: UI-TARSと関連論文紹介
Avatar for Kazuki Fujikawa kfujikawa
0
990
20250808_AIAgent勉強会_ClaudeCodeデータ分析の実運用〜競馬を題材に回収率100%の先を目指すメソッドとは〜
Avatar for Kakeru Sato kkakeru
0
190
サーバーサイドのビルド時間87倍高速化
Avatar for PLAID Tech plaidtech
PRO
0
180
AWS Serverless Application Model入門_20250708
Avatar for ShinMatsuzaki smatsuzaki
0
110
パスタの技術
Avatar for Yusuke Wada yusukebe
1
390
DockerからECSへ 〜 AWSの海に出る前に知っておきたいこと 〜
Avatar for Itaru Ota ota1022
5
1.7k
あのころの iPod を どうにか再生させたい
Avatar for orumin orumin
2
2.5k
Scale out your Claude Code ~⁨⁩自社専用Agentで10xする開発プロセス~
Avatar for Yuku Kotani yukukotani
9
2.5k
画像コンペでのベースラインモデルの育て方
Avatar for tattaka tattaka
3
1.8k
#QiitaBash TDDで(自分の)開発がどう変わったか
Avatar for Tommy(sigma) ryosukedtomita
1
370
Amazon Q CLI開発で学んだAIコーディングツールの使い方
Avatar for matsukada licux
3
190
UbieのAIパートナーを支えるコンテキストエンジニアリング実践
Avatar for Ryo Okubo syucream
2
620

Featured

See All Featured
Thoughts on Productivity
Avatar for Jon Yablonski jonyablonski
69
4.8k
Building Flexible Design Systems
Avatar for Yesenia Perez-Cruz yeseniaperezcruz
328
39k
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
26k
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
4k
Designing for Performance
Avatar for Lara Hogan lara
610
69k
Building Applications with DynamoDB
Avatar for Matt Wood mza
96
6.6k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
48
9.6k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
190
11k
What’s in a name? Adding method to the madness
Avatar for Product Marketing Alliance productmarketing
PRO
23
3.6k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
36
2.5k
10 Git Anti Patterns You Should be Aware of
Avatar for Lemi Orhan Ergin lemiorhan
PRO
656
61k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
53
8.8k

Transcript

  1. ࠓ೔͔Β࢝ΊΔ bugbounty

  2. ಺༰ •bugbountyͱ͸ •bugbountyͷར఺ •bugbountyͷ஫ҙ •bugbountyͷ࢝Ίํ •bugbountyͷӡ༻ •FAQ •͕࣌ؒ͋Ε͹

  3. bugbountyͱ͸

  4. bugbountyͱ͸ • ͍ΘΏΔʮ੬ऑੑใࠂʹର͢Δใ঑੍ۚ౓ʯ • ੬ऑੑ৘ใΛड͚෇͚ɺͦͷ৘ใʹର͓ͯۚ͠Λ෷͏

  5. bugbountyͱ͸ • ւ֎Ͱ͸͔ͳΓҰൠతʢMicrosoftɺGoogleɺFacebookɺ MozillaɺUberɺAppleɺAdobeɺͦͷଞࢥ͍ͭ͘اۀ͸ͩ ͍͍ͨɻAmazon͸΍ͬͯͳ͍͔΋ʁʣ • ࠃ಺Ͱ͸αΠϘ΢ζ͞ΜɺLINE͞ΜɺϐΫγϒ͞Μɺ Zaim͞ΜɺChatWork౳͕࣮ࢪ

  6. bugbountyͷར఺

  7. bugbountyͷར఺ • αʔϏεଆͰίϯτϩʔϧ͕Ͱ͖Δ
 ίετɺظؒɺن໛ΛαʔϏεଆͰίϯτϩʔϧ͢Δ͜ͱ ͕Ͱ͖Δ • අ༻͸0ʙແݶ • ظؒ͸ࠓ͔Β͍ͭ·ͰͰ΋ •

    ن໛͸୯Ұͷػೳ͔ΒαʔϏεશମ·Ͱ

  8. bugbountyͷ஫ҙ

  9. bugbountyͷ஫ҙ • ϗϫΠτϦετܗࣜͰͷνΣοΫͷ୅ΘΓͰ͸ͳ͍
 ͋͘·Ͱ΋ิ׬ؔ܎ɻͨͩ͠ɺิ׬ؔ܎ͱͯ͠͸ඇৗʹ૬ੑ͕͍͍ • ʢҰൠతʹʮୈࡾऀػؔͷݕূʯͱͯ͠͸ड͚ೖΕΒΕͳ͍ͱࢥ͏ʣ • ඇެ։ঢ়ଶͰͷࣄલݕূ͸Ͱ͖ͳ͍
 ࣄલݕূͱͯ͠ެ։͢Δ͜ͱ͸Ͱ͖Δ͚Ͳɺ׬શඇެ։ʹ͸Ͱ͖ͳ ͍

    • Τϥʔϩά͸େྔʹ૿͑Δ
 ՄೳͰ͋Ε͹ઐ༻؀ڥΛ༻ҙͨ͠΄͏͕͍͍

  10. bugbountyͷ࢝Ίํ

  11. bugbountyͷ࢝Ίํ • ࣾ಺ௐ੔ • ઌʹ΍͹͍ͱ͜ΖΛͬ͘͟Γચͬͯमਖ਼͢Δ

  12. bugbountyͷ࢝Ίํ • ੬ऑੑड෇༻ͷϑΥʔϜΛ࡞Δ
 ઌʹࣾ಺ମ੍Λߏங͢ΔͨΊ • ϓϥοτϑΥʔϜʹ৐Δ
 hackeroneɺbugbounty.jp

  13. bugbountyͷӡ༻

  14. bugbountyͷӡ༻ • ใࠂ͞Εͨ಺༰ͷτϥοΩϯά
 ϓϥοτϑΥʔϜʹ৐ͬͯ΋੬ऑੑ৘ใͷमਖ਼τϥοΩϯ ά·Ͱ͸ߦ͑ͳ͍ɻ
 ࣾ಺BTSͱඥ෇͚ͯͷ؅ཧ͸Ͱ͖ͳ͍ɻ
 खಈͰؤுΔ͔ɺͳΜΒ͔ͷ࢓૊Έ͕ඞཁ

  15. bugbountyͷӡ༻ • ӡӦϝϯόʔͰͲ͜·ͰΧόʔ͢Δ͔ʁ
 ৘ใڞ༗ͷൣғ
 ػೳ։ൃͱ੬ऑੑमਖ਼ͷ༏ઌ౓ͷ݉Ͷ߹͍ • ʢ͜ͷลɺ֤ࣾʹฉ͍ͯ΋ͦΕͧΕಠࣗͬΆ͍ͷͰϊ΢ϋ ΢͕͋ΔͬΆ͍ʣ

  16. FAQ

  17. ͍͘Β͔͔Δʁ

  18. ແྉͰ։࢝Մೳ ஈ֊తʹֹۚΛ্͍͚͛ͯ͹͍͍ ֤͕͍ࣾ͘Β͙Β͍͔͚ͯΔ͔͸ެ։ ৘ใ͔ΒਪଌՄೳ

  19. ੬ऑੑͬͯΑ͘Θ͔Β ͳ͍Μ͚ͩͲɻɻɻ

  20. ஌ࣝͳ͠Ͱ΋ग़དྷͳ͘͸ͳ͍ bugbounty.jpͳΒτϦΞʔδ Φϓγϣϯ͋Γ

  21. Ͳͷ͘Β͍ใࠂ͕དྷΔʁ

  22. ใ঑ֹۚͱαʔϏε࣍ୈ ใࠂ͕ଟ͗͢Δ৔߹ετοϓ΋͋Γ ֤ࣾͷެ։৘ใΛݟΔͱେମΘ͔Δ

  23. ແྉͩͱใࠂདྷͳ͍ͷ Ͱ͸ʁ

  24. ݱঢ়͸ಛʹࠃ಺ʹؔͯ͠͸ແྉͰ΋݁ߏདྷΔ ࿹ࢼ͠తͳਓͱ͔ɺϙΠϯτ໨తͷਓ΋͍ΔͬΆ͍ ʢόάϋϯλʔʹରͯ͠αʔϏε͕଍Γͯͳ͍ҹ৅ɻͨ ͩ͠ɺΤίγεςϜతʹ͸΋ͪΖΜ෷ͬͨ΄͏͕͍͍ͱ

  25. ӡ༻͢Δ্Ͱͷ஫ҙ఺ ͸ʁ

  26. ʮҰൠతʹ੬ऑ͔ʁʯͰ͸ͳ͘ʮαʔ Ϗεͱͯ͠੬ऑ͔ʁʯΛߟ͑Δ ͨͩ͠ɺӡ༻ͭͭ͠௚ͯ͠ߦ͘ͷ΋͋Γ

  27. ΍ͬͯ͸͍͚ͳ͍͜ͱ ͸ʁ

  28. ੬ऑੑใࠂܦ༝Ͱͷ߈ܸɺඃ֐΋ߟྀ ͢Δ͜ͱ ੬ऑੑͰͳ͍ͱ൑அ͢ΔͳΒɺमਖ਼· Ͱʹ૬खͷฦ౴Λ଴ͭ͜ͱ

  29. ୈࡾऀݕূʹൺ΂ͯ໢ ཏੑ͕௿͍ͷͰ͸ʁ

  30. ػೳతͳ໢ཏੑ͸͔֬ʹ௿͍ ͚Ͳɺ࣌ؒతͳ໢ཏੑ͸ߴ͍

  31. ͜͏͍͏ͱ͜ΖͰ஫໨͞ ΕΔͱ߈ܸ͞ΕΔͷͰ͸ʁ

  32. ͞Εͳͯ͘΋߈ܸ͞ΕͯΔ ίϛϡχέʔγϣϯͰ͖Δϙ ΠϯτΛ༻ҙ͢Δͱߟ͑Δ

  33. ൑அͰ೉͍͠ϙΠϯτ ͸ʁ

  34. ֹۚΛ͍͘Βʹ͢Δ͔͸͔ͳΓ೰ΉϙΠϯτ ͨͩ͠ɺ࠷ऴతʹ͸ʮαʔϏεͱ͍ͯ͘͠Β ʹ͢Δͷ͔ʁʯ࣍ୈͳͷͰɺҰൠతͳֹۚΛ ࢀߟʹͭͭͦ͠ΕͧΕͰܾΊ͍͍ͯ

  35. ӡ༻Ͱ೉͍͠ϙΠϯτ ͸ʁ

  36. ڴҖ౓ͷ௿͍੬ऑੑͱ௨ৗͷ ։ൃλεΫͱͷ݉Ͷ߹͍͕೉ ͍͠

  37. ͕࣌ؒ͋Ε͹

  38. ฐࣾͰ͸bugbountyΛchaos engineeringతʹҐஔ͚ͮͯΔ

  39. ։ൃऀ͸جຊ௚઀bugbounty ͷIssueΛ୲౰͢Δ

  40. ίϯτϩʔϧ͞Εͨ੬ऑੑใࠂΛৗʹ ड͚ଓ͚Δ͜ͱͰɺ੬ऑੑใࠂͷϋϯ υϦϯάεΩϧΛ޲্͍ͤͯ͘͞

  41. Let’s bugbounty!