Hello, and welcome to the next video. Reviewing bug
bounty. We are
going to learn about bug Bounty process, and I'm
going to explain you.
Wake me up in the setup.
Guys, we are inside Kali Linux machine. And in
the previous video, we have learned that how you can.
Generate reports and then how you can analyze
it.
And this we do, we are learning about bug
Bounty process. So first of all, what is bug Bounty
process? Process means? For
example, if you are Duster,
All right, so you can test it website or Destin
application and then you can report it
to the company and then company can reward
you.
So this process is called Bug bounty.
How many researchers performed by bounty?
so,
Let me show you more about it. So first
of all, you can see here that this is burp, Suite Community Edition,
where you can see here, that it is
listed various. Kinds of Hollywood least not, for
example, for Claire website. For example,
that website,
you found a school in Jacksonville.
Not supposed to serial website so you
can submit your report this website to
accompany a kinetics. And then
I kinetics can give you a reward for this.
So you need to find a new one liberty inside
a website.
And then I'm thinking provide you
where it's kind of reward for this.
so,
Let me provide information about.
Bounties of finding your first bug bounty, hunting
tips from the book 3 community.
Six companies, reefer
company wants researchers to find one
of these in their website or application. Then you
can try and search it if you are not authorized and do
not try to scan the
website for Anna, Canova. Liberty, should
be authorized.
this company says that we have an application and
And you can test it. Then you
can.
That's the website and brought them to Port Acres 121
a report showed that the hacker
Community nearly doubled last year to more than 6,000 with.
So many people involved. We wanted to get some tips
and tricks from seasonal professional.
So you can see here that the what is
the process hit us. Some advice on how to find your first paid
bug Bounty according to our community. So obviously you
can use Burpee Seed to
Desta website. And if you
find a wallet with, again, if you're outside and you can simply submit
the bug to the
company and Company and the word you
DeWalt.
Supposed to understand the process to Newberg bounty
hunters. Should narrow their focus, to allow them to get familiar with
the specific validity type and really get to grasp in
it. So that example, I have showed you in the Gold West
Stockton. So first, you need
to learn more about them.
I'm Community advised newbies to start small,
go for simple box and really understand the end-to-end
process before trying to hit those bigger targets First
Tee. First, try to find small bugs, bite, and
then learn how
you can report it to the company, and then you
can go further. Because Liberties focus on
specific examples, read right
up from the celebrity search for
the program, you are targeting so you can
search it or you can take Albert free tool to find it
when you find a box change the type of Liberty and
the beat step one website. So
you can change that type of money between now, you are checking excess
money between the website and then you can repeat Step 1.
Which means focus on the specific type of Bollywood.
I can also see you don't overcomplicate things,
go for something easy that you understand. Even if your first
about Bounty small, little feet. What's better than
a bigger one later on. So you have
to start from
A small.
Issue, for example, if you found the simple injection
attack, right, so you should
not overcomplicate things. Select a
particular issue and tried in a website so you
can find it then, change the issue type and
then find it, right. So do it one by one step
by step.
Find Uncharted territories number to looking
out for him and can explore exploitation material
of the web is what we brought. Our people would say
I can use all about those dark and Dusty. Connors, According
to, some of the other followers are great place to make a start to
finding example. Look for the dusty old
corners of applications that everybody has forgotten.
We ran into all the time when I walked on at Google
if you see the old Google logo or 10 someone's phone
number. It's a good place to look.
So you can also choose an old private program that
pays small counties their various platforms.
I will provide more information. Never stop
learning the most popular piece of a community advice,
always, keep learning service. Keep
learning about believe it. He's always, always always
learn more about, my Liberties will get
you far in the world and it started this. Something we
encourage ourselves. That's why we build the. So they have
been sick that Security Academy. As far
as we see, the only way you can be sure of never change about
you something.
So you can check about Security Academy. I will
check it later.
Alright, so I said
your phone's about ready to watch when you come to the first successful bounties
for a community. That wasn't definite focus on
content. Discovery. Looks like once again, knowledge has been proven to
the most so recognitions
are frequenting is a main
step.
Together content about the website from my
phone on the waiver form for rock. Obviously. That's
how you can gather information from internet
website.
You can see how am I supposed to walk on the very first backroad Bounty. When was
it stored exercise in the messaging back? And I
found it was in there busting list of iron ii disorder bus
Tuesday. 2 level in Kali Linux.
To visit that place
off of website. Starting it going out. You look into Louisville
information ever found doesn't listen
to massive SQL injection turned into my first mean
you should bring test which led
to me discovering my love for penetration testing.
And then go for me later.
The final word is a device. Visible
learning ensure you get practical experience
while at like map Security Academy on x x.
So, let me check web Security Academy.
So look me up on this one.
So, Wesley defrauded by Portugal.
So you can see here that security academies free online,
web security training from the creators of Brookfield. So
I mean,
You can learn about more Liberties
quickly with the help of these labs.
Right. So lap song about his condition crawfish
dipping, csrf except so, you can try
this one that Security Academy or
you can also check eggs. Or. Net.
Purposely resenting few tasks so you
can see your diesel emissions and you need to complete the missions
here.
Right.
When you are ready to hunt for real speak a website with complex
functionality and don't move on until you have learned how it
works. It works inside out so it can be
foot in the door for all manner of cybersecurity careers.
I think I can use fast becoming an integral component of security
testing and according to hacker 1, Hacker, powered security,
officially became widespread Diamond around 2016.
so,
You need to if you want to learn about bug bounty
hunting that you need to start from a small one, from a
small issue of the following, perform breakfast on
websites like these. And then you can
Come in real world from its
Beginnings as a bug Bounty Hunter, James experience with pain
testing and move. This will go to become a security researcher when he's
not scouring the web for coordinating matter.
How early you can use the
functionality of broke scanner,
right? And obviously, we know that above scanner,
we can gather information about where is going
to believe. What is the website?
That's why I've been distant so security. So just use burp
Suite to to gather information from application
website.
So this is all about bug bounty hunting off
a website or application with that
buff breastfeed.
So this is the end of the course, and
I hope you have enjoyed it. Thank you so much for
your time.