Book Image

Bug Bounty Hunting Essentials

By : Carlos A. Lozano, Shahmeer Amir
Book Image

Bug Bounty Hunting Essentials

By: Carlos A. Lozano, Shahmeer Amir

Overview of this book

Bug bounty programs are the deals offered by prominent companies where-in any white-hat hacker can find bugs in the applications and they will have a recognition for the same. The number of prominent organizations having this program has increased gradually leading to a lot of opportunity for Ethical Hackers. This book will initially start with introducing you to the concept of Bug Bounty hunting. Then we will dig deeper into concepts of vulnerabilities and analysis such as HTML injection, CRLF injection and so on. Towards the end of the book, we will get hands-on experience working with different tools used for bug hunting and various blogs and communities to be followed. This book will get you started with bug bounty hunting and its fundamentals.
Table of Contents (20 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

Meetings and networking


Sometimes, the best way to find out the latest news, vulnerabilities, techniques, and tools is face to face. If you live near to a place where other bug bounty hunters, security professionals, hackers, or researchers live, maybe it is possible that meetings or conferences are organized. The following are some events where you can learn a lot.

LiveOverflow

LiveOverflow's YouTube channel (https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w) is a channel focused on security research. The author explains in an easy way how to exploit real vulnerabilities and solve CTFs.

OWASP meetings

The Open Web Application Security Project (OWASP) is organized in a global way, with local chapters in the main cities around the world. Each chapter organizes periodic meetings that include fast talks, lectures, CTFs, workshops, and more. Go to OWASP's website and look for your nearest chapter: https://www.owasp.org/index.php/OWASP_Chapter.

DEFCON meetings

DEFCON is the biggest security...