In this lesson, we learn how to setup and configure Kali Linux, which will be our penetration testing distribution. We will learn to install drivers in old and obsolete computers as well.

In this part of the course, we perform the second prerequisite of the course that involves the installation of OWASP ZAP Vulnerability Scanner

In this video, we configure burpsuite which is a necessary tool used for our upcoming Bug Bounties that we will be performing.

In this part of the course, I explain some of the websites that we will use to perform automatic penetration testing that will be helpful for our future Bug Bounties.

In this video, we install and configure ngrok http tunnel which will be useful for future Bug Bounty Projects that we will perform.

In this video, we install an extension for Firefox for checking Web Application Technologies which will be necessary for performing our Bug Bounty Hunting.

In this video, You'll learn how to use the Nikto Vulnerability Scanner to automatically scan and discover vulnerabilities on Web Application Systems.

In this video, You'll learn how to use nmap to find vulnerable web application ports. While we won't be using nmap at all in the upcoming parts of the course, it's important to understand why you'd need to use this tool as a penetration tester.

In this video, I show you how to use the GoBuster Tool for Directory Enumeration using SecLists. This tool itself is similiar to fuff and dirbuster as well. While we will be using fuff in other parts of the course, it's important to understand how to use GoBuster.

In this prerequisite, you'll learn how to install and setup GoBuster and SecLists. While we won't be using GoBuster in our Pentesting Work, it is necessary to understand it's importance and why you should have it for other future Penetration Testing work. Please check the video "Using GoBuster" for more information on this.

In this video, I explain the basics of performing Bug Bounties before we jump into doing any bounties and performing penetration tests.

In this video, we attempt to perform an exploit on a real vulnerable target to try obtain Remote Code Execution through the help of Artificial Intelligence and the OWASP ZAP Automatic Pentesting Tool.

In this video, I exploit two CTFs from PortSwigger that are vulnerable to SQLi. One of them using manual exploitation and another one using automatic pentesting tool. Please keep in mind that the purpose of the video was to show that the database server is exploitable and therefore, I didn't pull out any information or dump tables from the databases.

In this video, I use a combination of different automatic penetration testing tools to attempt to find a Subdomain Takeover on a real Bug Bounty Target.

In this video, we use a tool called TruffleHog to approach a real-life VDP Target from HackerOne.

In this video, I show you how to use Nuclei in Verbose Mode to enhance Web Application Penetration Testing and Scanning Results using the automated tool.

In this lesson, we use Katana, an automatic Website Crawling and Spidering Tool to find Vulnerable Endpoints within a Web Application System.

In this lesson, I use a GitHub Automated Tool to attempt to bypass 403 Access Denied on a site vulnerable to Local File Inclusion. Please check the video on LFI below before watching this video.

In this video, I exploit a Missing SRI Vulnerability on a real bug bounty target and test for the Missing SRI Vulnerability, which eventually is present.

In this video, I explain how to use the manual exploration technique for automated vulnerability detection on the Web Application System using the OWASP ZAP Utility.

In this video, I approach a real bug bounty target and exploit an Open Redirect Vulnerability

In this video, I exploit an account takeover vulnerability in a real bug bounty target. In this vulnerability, both email and OTP have been bypassed.

In this part of the course, I explain and exploit a potential Stored XSS Vulnerability using a PDF Document.

In this video, I approach a real world target with an OTP Overflow Attack for a Bug Bounty Hunting.

In this lesson, I explain how to exploit the IDOR Vulnerability with an additional CTF from PortSwigger Academy on IDOR Vulnerability that we will walk through as well.

In this video, I present to you some Capture The Flag Games that can be used to help teach you and guide you to understanding XSS Vulnerabilities so you can be able to perform exploits later in real-world scenarios when it comes to live Bug Hunting.

In this video, I explain how to advance your Google Hacking Skills to approach real-world Bug Bounty Scenarios for Manually Finding Potentially and possibly Vulnerable Endpoints on different Web Application Systems from Google alone.

In this part of the course, I show you how to exploit LFI and Directory Transversal Vulnerability. This part of the course incorporates the use of a CTF to help in understanding the vulnerability.

In this lesson, we go through a CFT from PortSwigger Academy on performing Penetration Tests to gain Remote Code Execution through a Remote File Inclusion Vulnerability (Upload Functionality); I even further explain that the real-life concept applies the same to as what you've learned in Lesson 14 of this course.

In this video, I use a PortSwigger CTF to exploit a CSRF Scenario and showcase a real-world scenario of how to use a CSRF HTML Script in a false-positive scenario gotten by the OWASP ZAP Vulnerability Scanner and explain why automated pentesting shouldn't be relied upon.

In this lesson, I show you how to exploit a SSRF Vulnerability from a CTF on the PortSwigger Academy. In addition, I show a different way to approach SSRF in a real world scenario as well.

In this video, I show you how to use GitHub as a Hacking Advantage to collect sensitive information. The dorks were used on a real VDP target for HackerOne.

In this video, I show how to bypass Web Application Firewalls in the scenario whereby I used encoded payloads on two different Web Applications with two different Firewalls. In the first one, I bypassed using a Base64 Encoded Payload to test for XSS and on the second one, I used a payload to bypass and test for SQL Injection.

In this lesson, I will show you how to exploit CORS Vulnerability from a PortSwigger CTF. You can check the resources section for a HTML Document that you can use with a script to send the API Key back through a tunneled ngrok server.

In this last lesson, I show you how to exploit Clickjacking Vulnerability from a PortSwigger CTF after attempting to exploit on a permitted website by it's owners (KT and Brenton), which appeared to be a false positive from the OWASP ZAP Utility due to the WAF protecting the page and the implementation of code they have put on the page to protect the site from sensitive actions created by the clickjacking vulnerability.

In this video, you'll learn how to make your final bug bounty reports for HackerOne and other Bug Bounty Platforms that you plan to use.

Conclusion and Congratulations for completing the course.