Welcome to our video lecture.
In this lecture we will talk about Mitt Romney's on Monday hunting nowadays every bounty hunter has
used different methodologies for hunting when narratives and it normally varies from secured unless
as it takes a while for a researcher to dial up their own methodologies and lots of experimentation
as well.
So let us understand by bounty hunting methodologies first one is an enlarging the scope of the program.
This is the important scope of the hunting.
The scope is the most important aspect of a backbone deprogram because it tells you which assets to
test and you don't want to spend time testing out of scope domains the scope also tells you which are
the most recent targets and which are the ones that can be tested to speed up your bounty process second
one is looking for valid targets sometimes the program does not necessarily have the entire infrastructure
in its scope and there are just a number of applications and domains that are in the scope of the program
valid targets are targets that help you quickly test for a narrow base in the scope and it is divesting
the next thing.
Quick overview of targets that is testing of discovered targets.
This methodology is easily has done with automated scanning this basically tells the researcher whether
the targets have been tested before or have they been tested a long time ago.
It is likely that the application has been tested by researchers before next day's reviving all applications.
This is the stage where you review all the applications and select the ones based on your skill set.
For instance Google has a number of applications.
Some of them are coded in new builds.
Some of them are coded in Baton fuzzing of errors to expose flaws fuzzing is the fastest way to hack
an application is to test all of the input parameters fuzzing takes place at the input parameters and
easy method of it writing different payloads at different parameters to observe responses when testing
for fuel injection will nappies and crosswords scripting when a base fuzzing is the most powerful method
to learn about errors.
It is also used to map and applications back and structure.
Next thing is exploiting please by fuzzing we identify the evil narratives.
In other words relativity ID is just one aspect of it in by one hunting.
Well now days in by one day hunting one days have to exploit and constructively to generate strong proof
of concepts so that the report is considered in high regard a well explained the proof of concept will
accelerate the review process in can mean ancient penalties and tests while latter day exploitation
is not that important.
But in back Monday hunting the stronger the proof of concept and the better the reward
OK that's it.
In this video lecture thank you for watching.
See you in the next lecture.