Hello, everyone.
So in this video, we are going to see how we can start hunting on open book bounty platform.
So this is this video is basically about the road map on this platform.
So let's start.
So you just have to open this.
You are all that is open, but quantitate Orji into your browser and after opening this website will
look somewhat like this.
And yeah, so it looks like this.
I will just go on to report a vulnerability.
You just have to remember, guys, to handle on this platform.
You should have a valid Twitter account and you need to log in using Twitter only.
So, yeah, I have a Twitter account, so I'm just going to sign in with my Twitter account over here.
So I will click on Authorize.
Yes, so now I'm currently logged into the application, I will just click on the venerability again
and you can see coordinated and responsible vulnerability disclosure.
Perfect.
I will just quickly click on I agree with the above mentioned ethics guidelines and in the vulnerability
detail section, I'm going to choose the vulnerability that I have found out.
So let's say exercice.
So yeah, you can choose exercice yourself anything.
So I'm going to choose exercise and in the exercise you all you have to give which website and which
end point you found the exercise.
So let's say hdb example dot com slash parameter equals to exercise.
Let's say this is an addiction point in the post data.
You can just give the data from Boxwood the post request which leads to this exercise.
OK, so perfect cookies.
If it is an authenticated one, you can give your session cookies and in the application you just produce
custom code.
The test and in comments section you have to write the steps to reproduce so you can just type step
one.
Go to this.
You all step to hit, enter into your browser and you'll be able to see and exercise pilot execute,
which confirms that there is a Xerces vulnerability.
You have to click on all of this, basically check box everything and you have to click on submit.
So after you click on Submit, your vulnerability report will be submitted to open bug bounty.
So as you can see, thank you.
Public vulnerability submission will be verified soon.
So my report has been submitted.
Obviously, this is a blank report which I submitted to demonstrate you guys and you can see it has
been assigned that is one one four six seven nine five eighty two.
This report, submission date data spending.
And yeah, basically this report is will be verified and it will go in if it is a valid vulnerability
is going to go into this on on hold section over here.
If it is not a valid report, it is going to go in rejected submissions.
These are some blog posts which you can read people keep writing about vulnerabilities that they find.
And the researcher account settings, you can see you can keep your profile settings, you can write
an intro, how to contact you, your contact certifications, if any.
And Hall of Fame, if you have done any.
And you can just save this profile.
So a very simple.
Functionality over this open book, Open Bermondsey platform.
It is very simple and very convenient to report vulnerabilities.
Now, one most important thing to remember is in open book, Bundgaard is not like programs or anything
like we saw on Hagaman on Backout in open book Bondie.
This is basically by open source community, which means you can try to report any vulnerability that
you find onto the Internet.
So any vulnerability into any application of any country, you can report that valid bug over here.
OK, so there is a lot of big scope of you reporting valid vulnerabilities on all platform because there
are millions and millions of website and you can just test them, make them they are testing playground.
But remember, do not do any types of intrusive testing or any misuse of the data if you have found
a valid vulnerability on any website, just tried to report it over year after reporting that vulnerability
or whether you're open about Bondie research team will try to connect with that program or that company
and they will try to fix it.
After fixing, those people will get in touch with you and they are going to reward you with some swag
or Hall of fame or maybe rewards.
It depends on the company.
If I go to my dashboard, as you can see, whatever I have done over the years.
So this is the first thing I'll go into recommendation.
If anyone gives you a recommendation and it comes over your badges if you own any badge.
So as you can see, the first badges for 10 plus website, second badge is for 50 plus 500 plus websites.
If you report valid vulnerabilities, last is 1000 plus.
Similarly, there are a lot of bad badges which can unlock.
I haven't logged one blog or a batch which I which I wrote a year ago.
OK, so you can earn your badges, statistics.
You can see whenever you are hunting blog you can write and you can read blogs.
Perfect.
So I hope you guys understood this.
Let's go in the Hall of Fame, top security researcher and see the top security researchers list.
You can see is this research at risk, which is Kalvin has helped in batching one seven four one six
programs.
So he has submitted those many reports.
Let's go to the profile and you can see the literature reputation is this much fixed, these many websites
in the certificate you can see open.
But Banty has given an outstanding researcher certificate to this user because the user has submitted
a lot of reports and help to fix a lot of vulnerabilities.
You guys can also get the certificate by reporting valid vulnerabilities for around fifty two hundred.
And you will also get a certification.
Perfect, you can see what are the reported vulnerabilities where the fuse is also, so, yeah, this
is it.
I hope you guys understood how we can create an account on this website and we can start our bug bounty
hunting journey onto this platform.
I hope this helps.
Thank you, guys.
Thank you so much.