HOW TO APPROACH A NEW BOUNTY TARGET? 5 THINGS YOU MUST TEST FOR!

HOW TO APPROACH A NEW BOUNTY TARGET? 5 THINGS YOU MUST TEST FOR!
Approaching a new target can be tricky, so here are FIVE - BUG BOUNTY methodology tips to always test for while pentesting the the main webapp. And If you don't test for these, well then you're missing out!. From beginner to intermediate with JASON HADDIX! TL:DR 1. Don't just poke around on the outside of the app. There’s a lot of stuff on the inside. 2. Always look for IDOR’s and Access control bugs, can you do the same thing as another user? 3. Test all the file uploads, not just the profile picture, test all of em! (Command injection) BONUS: Check all the dynamic parameters that accept urls or paths for SSRF's 4. Create an epic wordlist and content discover all the hidden paths, try to identify information disclosures. find that juicy admin panel or forgotten backup.zip file.. 5. Check for non technical bugs, what does the customer care about? Can you leak some data? Some links: HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors https://ift.tt/1dz7G6j https://html5sec.org/ ImageTragick https://ift.tt/1Z97o8Q https://ift.tt/2UFCkVu SSRF: https://ift.tt/31IDeSA Go give Jason a follow on twitter. https://ift.tt/2nsmEDs https://twitter.com/jhaddix If I can do it, you can to.. Sign up for Hackerone & hacker101 and start hacking! bit.ly/hacker101-stok bit.ly/hackerone-stok ------------ --- - If you also want to get that STÖK vibe, here's my gear, --CAMERA / STUDIO GEAR-- PANASONIC LUMIX GH5 4K https://amzn.to/2LIfDf9 Nikon D850 https://amzn.to/2xzjO4m DJI Osmo Pocket https://amzn.to/30ppbzP Nikon AF-S FX NIKKOR 50mm f/1.4G https://amzn.to/2GbQjuv PANASONIC LUMIX 12-35mm Camera Lens G X VARIO II, F2.8 https://amzn.to/2G12EBp Rode VideoMicro Compact https://amzn.to/2JsYEdT Tascam DR-70D 4-Track Portable Audio Recorder https://amzn.to/2XtVvnS Blackmagic Design UltraStudio Mini Recorder - Thunderbolt https://amzn.to/2JyhBfr --COMPUTER-- Apple MacBook Pro https://amzn.to/30gM0p9 Dell Precision M5510 WorkStation https://amzn.to/2XwNEGg Dell U3419w Ultrasharp 34-Inch Curved https://amzn.to/2Jyigxr Logitech MX Master 2S Wireless Mouse https://amzn.to/2XCAvf3 Apple Magic Keyboard with Numeric Keypad https://amzn.to/2JhEfcW Logitech HD Pro Webcam C920 https://amzn.to/2LH8awG QNAP TVS-672XT 6 Bay Thunderbolt 3 NAS https://amzn.to/2LHIUqb --STUDIO LIGHTS-- Philips Hue Smart Hub https://amzn.to/2Xx4Hbd Philips Hue Single Premium Smart Bulb, 16 million colors, https://amzn.to/2LCODxk Philips Hue Smart Dimmer Switch with Remote https://amzn.to/2XtWbJW Softbox Lighting Kit https://amzn.to/2LGZEhs ------------- -- STÖK LOVES: https://ift.tt/1NJnmzO https://ift.tt/1EWZ4Dj https://ift.tt/37dprVm https://ift.tt/2SdFYUW https://ift.tt/1NOjjY3 https://ift.tt/39j2KAs
via YouTube https://youtu.be/aNQg9mg4WNI