Hello, everyone.
So in this video, we are going to see how road map, so how do find when liabilities on HARKAWAY and
how to report vulnerabilities and where and to navigate onto the portal.
So this is the second video for seeing and reporting on liabilities on Hagaman.
So let's just quickly start.
So as you can see, you just have to type one dot com into the URL of your browser.
This will get opened just quickly go and sign up and you try to make an account on this website.
Just have to choose.
I am a hacker feature because you are going to report vulnerabilities.
So you are a hacker.
So start hacking today.
Perfect.
You just need to give your details over here.
So I'm going to give my details.
Let's say I give this name
and in my username I can give any username that I want or let's say I give the same name, email address,
I give my email address for sign up process.
And yes, the important thing over here is you need to keep a strong entropy for your password.
Hacker one does not allow keeping weak passwords, so it will give you continuously give you errors.
So you need to have strong entropy.
So I have got some errors.
So this username has been already taken.
OK, so I'll just make it to one, two, three, and I'm going to set the password again.
So, yes, it was rather password.
And let me try to sign up again, OK?
It does not contain enough entropy, as I said, you guys, you need to set a password which is strong
enough then only it will allow you to keep a valid password.
So let me try to get one more password.
OK, so.
This time it should work.
Let me give a very strong password.
Now, that's a great password.
OK, so let's see if this works.
And let me try and create account.
I hope this works perfect.
So this password worked.
Now you can see please verify very email.
So I just got an e-mail right now.
I'm going to click on confirm my email address and perfect.
My account is successfully confirmed.
So let me just quickly login with my account that I created right now.
In the passport field, I'm going to again type my password,
click on Remember Me and click on CNN.
So after I sign it into the application, the first dashboard that I'm going to see is this.
So I'll just quickly go into the directory tab because this is what is important and you will find a
list of programs over there.
So after going into the directory, you can see there, these are all the programs which are being listed
on to hacker one.
So you can try to hunt on any program.
There are a lot of programs.
So let me just for a program that is over
and you can see all that is already there since 2014, researchers are hunting on this.
So whenever you open a program, it looks like this.
This is everything, rules, regulations.
Important thing for us is what is in scope, what is out of scope and how much do they give for bounties.
So these are out of scope domains.
You have to leave these domains and report everything else that is in scope.
So let me just go to submit report and you can see they are not allowing me to report.
Why?
Because I does not have significant reputation.
My signal is not good and I cannot hunt or report.
I want to to but no problem.
I'm going to increase my signal how to do that.
So basically you can try for solving some CDs which are over here.
Also, you can try for some open programs.
You can start with them.
Let me just go to my profile.
As you can see, this is my profile, which is currently empty right now.
Let's go to the Inbox feature.
Inbox feature is wherever you whenever you try to report vulnerabilities that will come over here.
So any open report pending disclosure, which is accepted report and all total number of reports, let's
go to the hacker dashboard.
But then again, see, this is my profile.
You can submit a report from your you can read about hacker one.
And yes, we can see on the left side bookmark five programs on the directory.
Just choose five programs that you want to hunt for upward.
Five items on activity on twenty six point on hacker one zero one.
Capture the flag.
This is helpful because you will get a couple of invites for your next program that you can hunt for.
So you can just solve this hacker one zero one CDV if you want.
This will just give you some of invites to set to start hunt for it.
Let's go back.
To the Akron dashboard, yeah, so your four year it is, that's it.
Let me go to the profile settings.
You can edit all the settings that you want over here and let's see some options from here.
You can.
These are the basic options that you can fill, whatever you want according to your needs and payments.
You will you will be able to see what are the total payments that you are going to get.
Now, it is balance zero perfect payment payout preferences.
I'm going to show you some important things.
Only you can observe other features by yourself and explore them.
So in payout you can add a payout method, either PayPal or anything.
The best people, if you get any private invite, it will be into your inbox directly.
And the last one is the activity tab, which is important here.
And you will be able to read all the reports which are being submitted on Hacket one and which are kept
open to read.
So basically we can read about those reports and yeah, you can come to know who and when security researcher
has reported what kind of vulnerability to what program.
As you can see see SRF on connecting people as payment provider has been reported on Apple and recently
and the audit was five hundred dollars perfect.
I think they receive CSIR every protection on adding PayPal and the payment provider, but the protection
is not good.
OK, so basically this user was able to do a SRF and this was the bond provided by Shopify.
So I hope you guys understood that.
How we can try to hunt for vulnerabilities on Hacker when this was a brief overview of the hacker platform
and where and you can try to find vulnerabilities.
This is again the dark mode, as we already see that you can utilize working at night.
Yeah.
So this is it.
This is basically whatever important things that you need to keep in your mind when you are starting
hunting on hacker one platform.
So I hope this video helps you guys and you guys can start hunting on this platform.
Thank you so much.