Book Image

Bug Bounty Hunting Essentials

By : Carlos A. Lozano, Shahmeer Amir
Book Image

Bug Bounty Hunting Essentials

By: Carlos A. Lozano, Shahmeer Amir

Overview of this book

Bug bounty programs are the deals offered by prominent companies where-in any white-hat hacker can find bugs in the applications and they will have a recognition for the same. The number of prominent organizations having this program has increased gradually leading to a lot of opportunity for Ethical Hackers. This book will initially start with introducing you to the concept of Bug Bounty hunting. Then we will dig deeper into concepts of vulnerabilities and analysis such as HTML injection, CRLF injection and so on. Towards the end of the book, we will get hands-on experience working with different tools used for bug hunting and various blogs and communities to be followed. This book will get you started with bug bounty hunting and its fundamentals.
Table of Contents (20 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

YouTube channels


YouTube is a great resource, where researchers and bug bounty hunters upload videos with proofs of concept and presentations about computer security. The following are some of the most valuable channels that are useful for a bug bounty hunter.

Web Hacking Pro Tips

This is Peter Yaworski's YouTube channel (https://www.youtube.com/channel/UCS0y5e-AMsZO8GEFtKBAzkA); here, you can find some of the material described in his book Hacking 101 with demos and more proofs of concept. The valuable thing about his channel is that there are basic and advanced videos, so all bug bounty hunters can take advantage of the material published.

BugCrowd

BugCrowd has created a section in its YouTube channel named BugCrowd University (https://www.youtube.com/watch?v=OVr7pnwJ2m8&list=PLIK9nm3mu-S4K4jMHwtplbrE1JMg0jyN-). This video explains the different concepts in bug bounty hunting, using the Bug Bounty Hunter's methodology in an introductory way and promoted by BugCrowd.

 

HackerOne

HackerOne...