Hello, everyone.
So in this video, we are going to see a bug bounty platform, which is very famous, and this particular
platform host a lot of programs from Europe.
So the platform is integrity.
They just have to go to this particular you are that is logging on integrity dot com.
And you can just sign up your account if you don't have the registration process is pretty simple.
You just need to give the user name that you would like to have under this particular dashboard, that
email address, your phone number, any strong password with a good entropy.
And you should agree this.
After you hit on create account, you will get a verification email onto your email inbox.
After you have verified your email, then you just need to login.
So I'm just going to login because I already have created an account on integrity.
So once you hit on a in or logon, this is how the dashboard will look like you can see over here.
Welcome back, Robert Schieffer.
This is a user name that have kept for my account.
The first view that you can see is the program's preview, wherein you can see the programs which are
being attached onto the integrated platform.
As you can see, this particular program which is set to vote in this particular program.
You can see it is a public program.
And you can see on the right hand side there are three checkbox, the first checkboxes I.D. check required,
which means you need to verify your I.D. Remember, this I.T. verification is not your email verification.
This I.T. verification is a you need to upload your identity card onto this particular platform that
we are just going to see in just a couple of minutes.
From the settings, you can upload your verification ID card.
And based on that, once your I.D. verified and then you can start hunting on those programs which have
this I.D. check required or it has been checked for now for this particular case and to this particular
platform, it does not require any check.
That's why we can start hunting directly onto this program.
Suspended means I have noticed integrity.
Whenever any particular security researcher phones and venerability into any program, they are suspended
for some time, at least for two days.
And once they track that particular bug and once they are into the process of triaging it, then they
open it again.
For other researchers to submit whatever bugs that I have submitted on integrity, I have seen this.
They accept the bug.
They suspend the program while the program is suspended.
You cannot send new reports.
You have to remember that, OK.
All right.
So as you can see over here for this particular program, which is DPG media, any check is not required.
You get reputation points and it also produced your report.
So let me just show you, how does it look like if I click on open program?
So let me just click on Open program.
And you can see what here it looks something like this.
This is the description and these other bounties that they pay for various severity of the particular
bug that you have found out as against for the law.
They are not being anything.
It is a zero euros for medium.
It is 250 high.
700 critical.
Eleven hundred exceptional.
2000 euros.
All right.
After you have seen this bounty, this section, if you move down over here, you can see the domain
section, which is very, very important.
Over here, you can see the particular yards which are into the scope.
Remember those particular you ordered it which are in the scope, should only be tested in case you
are testing any other are which are not in school, may result or end up in are not applicable type
of submission.
So remember, whatever, whatever is in school only report on those particular programs.
All right.
So now you get a..
These are the particular domains are subdomains which are valid to report.
If I just scroll down that you can see in scope, this is OK, out of scope and out of school, you
can read whatever books are considered to be out of scope.
So do not try to report these types of one relative.
For example, let's say see a screen action or hyperlink in nature or takeover's or sition issues.
But intuition does not get logout or frustration does not get expired.
These types of issues are considered to be out of school for this particular program.
All right.
If you see on the right hand side, hold on tight.
This program is currently suspended, which means some researcher has recently submitted a report which
you can see or hear last contributor's, which have been contributing and reporting the vulnerabilities.
For now, you cannot report a new unknowability until this program is reactivated or resumed again.
This is the leader board.
All the security researchers who find a valid vulnerability can be seen over here on the right hand
side.
All right.
Let's go back to the dashboard.
And now we understand this.
If I click on programs, then you will be able to browse programs according to your need.
Or here you can see I have got invite as well.
So invite is an amazing feature in which you get those particular programs, which are only there for
few researchers.
So these are not public programs.
All right.
So these two programs, if I accept them right, then I can start hunting on these programs.
But these programs are only invite only as you can see or hear this particular program exist out.
There is a public program, which means this is available for everyone to hunt down and find vulnerabilities.
But this program is invite only because I've accepted the invite and it's coming under all programs.
Again, see, this program is invite only.
So those programs which are considered as invite only, are a good source to hunt one's abilities on
because there are only few security researchers who could get these invite.
So the scope is high that you may end up finding a valid one lability because less number of hackers
are less.
Number of security researchers are going to hunt on these particular programs.
All right.
If I can show more, then you will be able to see all the invite that you have got.
As you can see, I have got all of these in right.
But I haven't accepted any till now.
If I go in activity, you will be able to see the activity that has been happening.
So you can see these programs are suspended.
The program this program is open.
This program is suspended.
Then again, it got open.
And so if I go and be out in the field, you'll be able to see whatever be out you are getting.
So you can see I have got to be out on five.
Twenty seven, twenty twenty.
That was a 150 euros.
This particular vulnerability was no limit on what little phone number to call.
All right, let's come back.
And in my submission to you will be able to see the submissions that you have been on to this particular
program.
So as you can see, these are the submissions that I have performed on this particular program, if
I will click over.
Here onto my profile and I will click on my activities, then you will be able to see whatever activities
I have done and I have a report, you will be able to see your ranking over here, the country that
you are renting from your reputation point, your LinkedIn profile, your streak streak is basically
what types of bugs you are reporting.
So if you report highly critical vulnerabilities, it will be critical, high, medium, low.
And your Twitter handle, as you can see, submission stats, 80 percent relevant abilities to accept
it face a top contributions.
As you can see over here, I'm the top contributor in these particular three programs, which means
I'm into that Hall of Fame.
Yes, so now if I click on edit settings, then it is going to take me to my settings tab, as you can
see over here.
Your identity has successfully been checked and verified.
So you also have to verify your ID then only you are able to hand in to specific programs which are
required in check.
Now, if I scroll down, you can see your preferred payment method so you can add your PayPal or anything
that you like or into there.
On the right hand side is my financial information.
Your Tea Party should say whatever you want.
You can go in profile and you can change your profile settings.
You can go in password and change your password.
You can go into Effy and you can enable your Two-Factor authentication so that you will be able to login
with authenticator app or with your mobile phone or TV.
So this is it for this video.
I hope you guys understood how you can sign up on this particular platform and you can start commenting
on programs.
Thank you.