
In this video, you will get to learn what you will get to learn from this course.
Explore how bug bounty platforms invite security researchers to identify vulnerabilities for companies, and learn how rewards range from merchandise to cash for reporting security issues.
Explore bug bounty programs by browsing the program directory, read each platform's policy on scope and eligibility, and learn how to report vulnerabilities to major platforms to earn rewards.
Set up a hands-on hacking lab by installing a local web server and database, with cross-platform steps for Windows and Linux to run Apache and MySQL for bug-bounty practice.
Install and configure a vulnerable web app on your local server, adjust permissions, extract files, start the server and database, and create the DVWA database for hands-on security learning.
Identify open redirect vulnerabilities by examining unvalidated redirects and parameters that forward users to external sites, illustrating how attackers abuse redirects and how bug bounty programs reward researchers.
Learn to identify clickjacking vulnerabilities by examining how transparent or opaque layers and iframes deceive users, demoing a real attack and reporting findings to bug bounty programs.
Explore a clickjacking vulnerability in Khan Academy demonstrated with an embedded object and frame tricks, showing how security restrictions block embeds and guard users against such attacks.
Explore how tabnapping enables phishing by abusing link targets to replace trusted pages with attacker sites, with a real-world report and demonstration.
Learners explore cross-site scripting and how unsanitized input can reflect malicious scripts back to the browser, enabling JavaScript injections and an alert box via reflected XSS vulnerabilities.
Explore Open Bug Bounty reports to identify reflection-based xss vulnerable parameters, such as input echoed in search fields, and practice bug bounty techniques.
Examine local file inclusion and remote file inclusion vulnerabilities, showing how inadequately sanitized include functions can expose sensitive local or remote files.
demonstrates local and remote file inclusion vulnerabilities, showing how improper parameter handling can include remote pages, bypass local restrictions, and enable potential client-side execution, with real-world DoD and HackerOne reports.
Explore unrestricted file upload vulnerability, how missing extension checks allow uploading malicious files, enabling command execution and site defacement, with real-world bug reports and remediation insights.
Continue learning by exploring topics covered in this course on related sites, watching security researcher videos, reading blogs, and following Twitter hashtags like #Bugman and #hakkar1.
This course is made from scratch. So, if you do not have any knowledge about Website Hacking or Bug hunting then this is course to go with. This course is not just based on home lab environment like DVWA and other vulnerable web application, Instead this course is completely based on real life security vulnerabilities that are reported on hackerone and bug Crowd. This is the place, where people make thousands of dollars in a night by just reporting one big bug to the big companies like Uber, Facebook, Ola, Amazon and Zomato.
So, this course will give you the brief introduction to the types of bugs that you can report and earn the money.