Bug Bounty - An Advanced Guide to Finding Good Bugs
What you'll learn
- Identify interesting behaviours in web applications to find great bugs
- Think outisde the box to approach a target
- Chain lower bugs to get an impactful one
- Write a comprehensive and detailed report
Requirements
- Medium-Good knowndlege of web application security
Description
UPDATE: as of this course becoming the #bestseller on Udemy, we have opened a private discord channel for all students where we do 1 live hacking session per week. Please join the discord after enrolling to attend the live hacking sessions! Thank you for the trust!
Bug bounties are evolving year after year and thousands of infosec enthuasiasts are looking to join the boat. Having a great place on that boat requires dedication and investing a great amount of time of work. In fact, there are multiple types of vulnerabilities and mastering the most important of these can be a game changer. In this class, attendees will learn the "how" and "why" of vulnerabilities they are already aware of instead of sticking to what the vulnerability is in general. This class will be based on real-life scenarios to show how to think out of the box in different scenarios to bring in the maximum impact.
During the session, students will have hands on excercises with:
SQL Injection
XXE
SSRF
RECON out of the box
RCE
SSTI
Directory Traversal
Access Control Vulns
Authentication Issues
Cache Poisoning
Info Disclosure
More subjects to be treated
Who Should Attend This Course
This course is intended for students with an interest in bug bounties, web vulnerability discovering and exploitation, or general infosec enthusiast who whish to know more about the side of bug bounties. Students should be comfortable with the type of vulnerabilities mentionned because we are not going to cover from a totaly beginner's side.
Key Takeaways
Students will learn in-depth about a vulnerability exploitation
Students will be able to approach a target effectively
Students will learn thinking out of the box in different scenarios
Who this course is for:
- Bug bounty hunters and anyone interested into web application security
- Pentesters
- Hackers
Instructor
- 4.2 Instructor Rating
- 171 Reviews
- 1,757 Students
- 1 Course
Hussein Daher is a bug bounty hunter since 2013 active on different platforms under the username "hussein98d". He has also established a local pentesting company in Ivory Coast for local companies and big corporations. His company, Webtrusion, has worked under NDA with multiple parts of the governments helping them identify flaws in their web infrastructure and providing complex services.
Hussein98d has also participated to LHEs and won the Vigilante Award and Best Team Collaboration Award in 2020 at Verizon Media's Hacking event H1-2010. He has identified vulnerabilities on more than 300 different companies worldwide.
@hussein98d
Hackerone: hussein98d
Bugcrowd: hussein98d