Offensive Bug Bounty - Hunter 2.0

Name: Offensive Bug Bounty - Hunter 2.0
Rating: 3.8 (123 reviews)

A Dynamic Hands-on Course on Bug Bounty Hunting

Created byVikash Chaudhary

Last updated 5/2024

English

What you'll learn

Bug Bounty hunting
Android App Penetration Testing
Web Application Penetration Testing
Application Security Testing

Course content

61 sections • 379 lectures • 36h 5m total length

About Hunter 2.03:26
Explore hunter 2.0’s live bug bounty course, covering advanced sql injections, recon, no-rate-limiting, buffer overflow, Android and iOS app vulnerabilities, hostile subdomain takeover, idor, cms flaws, and remote code execution.
About Author2:39
Vikas Chaudhary, a Pune cyber security consultant, introduces Offensive Bug Bounty - Hunter 2.0, sharing his real-world hunting methods, course successes, and plans for interactive discussions via app and WhatsApp.
What you should know before taking this course1:01

GET - Error based - strip comments_6:36
POST- Second Oder Injections Real treat ...3:13
GET - Error based - All your OR & AND be ...2:46
GET - Blind Based - All your OR & AND be ...4:09
GET - Error based - All your SPACES and ...4:43
GET - Blind Based - All your SPACES and ...4:31
GET - Error Based- All your UNION & SELE ...3:30
GET - Blind Based- All your UNION & SELE ...3:52
Explore blind SQL injection by using union and select patterns, testing input parameters, quote handling, backslashes, and multi-column queries to reveal content.
GET - Error Based- All your UNION & SELE ...2:39
GET - Blind Based- All your UNION & SELE ...1:07
GET -Error based- IMPIDENCE MISMATCH- Ha ...1:31
GET - BLIND - IMPIDENCE MISMATCH- Having ...1:12
GET - BLIND - IMPIDENCE MISMATCH- Having ...3:58
GET - Bypass custom filter adding slashe ...0:54
GET - Bypass AddSlashes()3:09
POST - Bypass AddSlashes()1:45
POST - Bypass Add Slashes (we dont need ...2:20
Explores how SQL injection techniques interact with input filters like addslashes, using quotes and union statements to probe database structure.
GET -Bypass MySQL Real Escape String2:06
Explore how MySQL real escape string defenses can be bypassed using Burp Suite to test inputs with backslashes, addslashes, quoted strings, and union queries, revealing database name and login vulnerabilities.
POST - Bypass MySQL Real Escape String5:25
GET- Stacked Query Injection - String7:37
GET - Stacked Query Injection - Intiger ...9:31
Explore GET-based stacking of queries to test injection vulnerabilities in offensive bug bounty workflows within this course.
GET - BLIND based - String - Stacked2:22
GET - BLIND based - Intiger - Stacked2:54
POST - Error based - String - Stacked3:21
POST - Error based - String - Stacked -B ...3:22
POST - Error based - String - Stacked - ...2:14
GET - Error based - Numeric - ORDER BY C ...7:35
GET - Error based - String - ORDER BY CL ...5:38
GET - Error based - Blind- Numeric- ORDE ...3:12
GET - Error based - String- Blind - ORDE ...2:56
GET - Error based - ORDER BY CLAUSE -num ...3:09
GET - Error based - ORDER BY CLAUSE-Stri ...3:57
GET - Blind based - ORDER BY CLAUSE -num ...1:42
GET - GET - Blind based - ORDER BY CLAUS ...1:28
GET - challenge - Union- 10 queries allo ...10:05
GET - challenge - Union- 14 queries allo ...5:24
GET - challenge - Union- 14 queries allo ...4:21
GET - challenge - Union- 14 queries allo ...3:14
GET - challenge - Double Query- 5 querie ...5:47
GET - challenge - Double Query- 5 querie ...2:22
GET - challenge - Double Query- 5 querie ...1:48
GET - challenge - Double Query- 5 querie ...1:36
Demonstrate bypassing challenge 61 by querying a database to dump the secret key from a random table, locating table and column names, and revealing the key in five attempts.
GET - challenge - Blind - 130 queries al ...6:22
GET - challenge - Blind - 130 queries al ...0:33

Background Concept2:55
No Rate Limiting Live Hunting 14:51
No Rate Limiting Live Hunting 21:58
Test rate limiting on a login flow by triggering OTP requests and simulating multiple attempts with Burp Suite tools, revealing vulnerabilities when OTPs flood a system.
No Rate Limiting Live Hunting 35:38
Demonstrates testing a potential rate-limiting vulnerability on Yammer using Burp Suite, Sequencer, and Intruder; observes only a few password-reset emails, concludes no rate-limiting flaw, and reports to Microsoft for bounty.
Reporting2:05

Background Concept5:16
Idor Live Hunting 13:32
Idor Live Hunting 25:37
Demonstrates idor vulnerability on Woot.com by intercepting and reusing a user id with Burp Suite to edit profile details across accounts.
Idor Live Hunting 310:01
Idor Live Hunting 45:25
Explore the Idor vulnerability in a dating app, demonstrating how an attacker can take over accounts by altering email and password through intercepted requests and server updates.
Account Takeover Idor7:30

Requirements

Watch Offensive Approach to Hunt Bugs Course First

Description

"Offensive Bug Bounty – Hunter 2.0" is an advanced course designed for those who have completed the foundational "Offensive Approach to Hunt Bugs." This sequel expands upon the initial training, diving deep into the complexities of identifying critical vulnerabilities in both web and mobile applications. As participants transition from the first course to this more specialized one, they are positioned to refine their techniques and emerge as adept stealth bug bounty hunters.

Bug bounty hunting involves the identification of security vulnerabilities in websites and applications and responsibly disclosing these findings to the respective company's security team. This practice is known as ethical hacking because it helps organizations enhance their security measures before malicious attackers can exploit the vulnerabilities. Bug bounty programs, often referred to as responsible disclosure programs, are initiatives set up by companies to encourage individuals to report potential security issues. By participating in these programs, researchers can receive rewards such as monetary bounties, swag, or recognition in the company's hall-of-fame.

For those with a keen interest in web application security, engaging in bug bounty hunting not only sharpens your skills but also offers the opportunity to gain recognition and earn rewards. This pursuit combines the thrill of discovery with the satisfaction of contributing to the enhancement of internet safety, making it a compelling and potentially lucrative endeavor for skilled cybersecurity enthusiasts.

Who this course is for:

Student
Developers
Information Security Researcher
Bug Bounty Hunter
Cybersecurity Researcher
Cybersecurity Engineers

Offensive Bug Bounty - Hunter 2.0

What you'll learn

Explore related topics

Course content

Introduction3 lectures • 7min

Recon for Bug Bounty Hunting4 lectures • 17min

Advance SQL Injection44 lectures • 2hr 42min

NO RATE LIMITING5 lectures • 17min

Long Password Dos Attack5 lectures • 20min

Buffer Overflow4 lectures • 20min

Android App Vulnerability Hunting9 lectures • 1hr 14min

Hostile Subdomain Takeover8 lectures • 48min

Insecure Direct Object Refernce6 lectures • 37min

Wordpress9 lectures • 1hr 36min

Requirements

Description

Who this course is for: