Easy $500 Vulnerabilities! // How To Bug Bounty

Поделиться
HTML-код
  • Опубликовано: 21 ноя 2024

Комментарии • 252

  • @NahamSec
    @NahamSec  2 месяца назад +1

    📚 Purchase my course and learn about bug bounty hunting with over 11 hours of content, 100+ labs, and 15+ vulnerability types 👇
    hhub.io/HWTl-LpLF0

  • @MrFrankenstock
    @MrFrankenstock Год назад +24

    Hands-on demo would definitely be a great way to absorb and ultimately solidify this content in the old brain! Thank you, Ben!

  • @SyedShayan-yt3in
    @SyedShayan-yt3in Год назад +165

    Hey! Would love to see the demo videos on each vulnerablity type.

    • @NahamSec
      @NahamSec  Год назад +49

      Noted!🫡🫡

    • @eviI_genius
      @eviI_genius Год назад +6

      @@NahamSec yes we want demo, specially it would be great if you explain us XSS in deep like using the dev tools, inspecting the element, give us some deets about how backend XSS works, I really loved ur Bling XSS video :) it would be great if you build up on that

    • @darkalpha2701
      @darkalpha2701 Год назад +1

      @NahamSec I would really love to see demo video of IDOR

    • @karthik3387
      @karthik3387 Год назад

      Plse do vedio

    • @CruzNateChroniclles
      @CruzNateChroniclles Год назад

      Video vulnerability examples would be great.

  • @marcelosmoniz
    @marcelosmoniz Год назад +26

    ● [1:41] Prerequisites: HTML, Web Technologies
    ● [1:57] #1 - XSS
    ● [4:03] #1(2) - CSRF
    ● ● [4:11] Burp Suit PRO : "Engagement tools" -> "Generate CSRF PoC"
    ● [6:22] #3 - IDOR
    ● [8:46] #4 - Authorization Issues
    ● [10:34] #5 - Leaked Credentials

    • @NizarZaidh
      @NizarZaidh 2 месяца назад

      bro doing social service 👍

  • @minimanimo7636
    @minimanimo7636 Год назад +56

    It would be very helpful and interesting to have videos on:
    - How to quickly and efficiently write a bug report (templates, automation, AI and so on...)
    - What are the most common BBPs policies and practices for not breaking them (rate limit, automation limitations)
    - Burp suite: best extensions and when to use
    Thanks mate, love your videos and appreciate your work!

  • @omarmahmood4209
    @omarmahmood4209 10 месяцев назад

    Yes, would absolutely love a hands on video on each of all the topics!
    1. XSS
    2. CSRF
    3. IDOR
    4. Auth Issues
    5. Leaked Creds

  • @mianashhad9802
    @mianashhad9802 Год назад +20

    CSRF and IDOR hands-on tutorials would be interesting. Would love to see some handy tricks for when our attacks aren't working.

  • @MarkFoudy
    @MarkFoudy Год назад +24

    Yes please do a demo of the vulnerabilities. Love your encouragement! Your videos always pump me up!

    • @NahamSec
      @NahamSec  Год назад +10

      Thanks for watching and thank you for being a channel member! 🙏

    • @MarkFoudy
      @MarkFoudy Год назад

      of course! I hope to meet you at defcon in the future. Your content has been so impactful for me. @@NahamSec

  • @DavitHayrapetyan-tc1uj
    @DavitHayrapetyan-tc1uj Год назад

    this channel is literally a goldmine, don't understand how it's only 105k subscribers

  • @bertrandfossung1216
    @bertrandfossung1216 Год назад +1

    A hands on version of this video where you can make some labs will be highly appreciated. Thanks for the cool heads up !!

  • @papafhill9126
    @papafhill9126 Год назад +7

    Honestly, I care less about learning the hands-on-tutorials about specific vulns, I would much rather see a tutorial on how to enumerate a target and suggestions on how to learn the technology the target is using. What questions should I be looking to answer about that tech? How to check for previous CVEs on that specific tech? Then maybe most importantly, how can track data flow of the target with that specific tech in mind. The issue with seeing tutorials on specific attack types seems to be trying to attack the same few input fields for hours but ignoring the all the technology used on that webpage that would likely tell me, "Hey, this page is pretty secure, maybe keep digging into other subs/ends."

  • @alexandriarichard7671
    @alexandriarichard7671 Год назад +1

    Listen $500 is a lot for me and thank you so much for this video! I am going to focus on Blind XSS and start your Udemy course thank you!

  • @OmphemetseMokene
    @OmphemetseMokene Год назад +2

    Am planning on being a full time bug bounty hunter this coming January, but my piggy bank is still behind ..if i could i would take your bug bounty course to fortify my skills..,gotta say your vids really motivate me..cheers!! from Botswana

  • @ASecurityPro
    @ASecurityPro Год назад +1

    Please do a hands on version of each vulnerability . Thank you man ❤

  • @francisstocktilliii2413
    @francisstocktilliii2413 7 месяцев назад

    I would love to see a hands-on video of this. That's exciting to hear.

  • @darealist232003
    @darealist232003 11 месяцев назад

    Yes, can we get a demo video showing how to look for these vulnerabilities. I just got my Sec+ and have been interested in learning more about bug bounty. Thanks for the video and get up the great work.

  • @azoosh
    @azoosh Год назад +2

    Yes! I would very much want to see more hands on videos on these bugs :) Your videos are awesome always!

  • @TrailMix324
    @TrailMix324 11 месяцев назад

    Yes i would genuinely love to see and would definitely watch hands on demo videos of each vulnerability type

  • @prasadande5690
    @prasadande5690 Год назад +1

    Yes Ben, Please also provide a demo of all those vulnerabilities :)

  • @VinceOConnor
    @VinceOConnor Год назад +1

    Yes, Love the content and would love you to do a demo of the vulnerabilities.

  • @AnonymousTrust21
    @AnonymousTrust21 Год назад

    If I get $500 based on content made available for then I will purchase your course based on that. Good luck to you too!

  • @litebulbentertainment
    @litebulbentertainment Год назад

    Yes.... The content is really good... Looking for demo video on each vulnerability

  • @Z0nd4
    @Z0nd4 9 месяцев назад

    I like this content. Yes NahamSec, please do more videos. Thank you.

  • @JoseSanchez-ue9wk
    @JoseSanchez-ue9wk 9 месяцев назад

    Yes Naham we would love to see a hands on demo!

  • @MW-cs8zd
    @MW-cs8zd Год назад +2

    I would love more videos like this from you. Very helpful. Thank you

  • @marijasilentj969
    @marijasilentj969 Год назад

    Yes please! You really talanted tutor! It easy to understand and follow you. Thank you a lot xx

  • @Marty_YouTuber
    @Marty_YouTuber Год назад

    i want a hands-on version of this. I love these videos.

  • @Cyber10791
    @Cyber10791 Год назад

    Needs brother these types of beginners friendly bugs and how to test for it it's very helpful.
    Looking forward too see these types of videos.

  • @damavox
    @damavox Год назад +1

    I love ya dude and you do a lot of for the community!
    But as someone who heard the same information from different sources what I would love to see is training, the secret sauce, and technique sharing. I know in bug bounty those things are held close to the chest but for someone stuck in the middle from beginner to practitioner, it would really help all us in that position to advance and level up.
    I would even be willing to pay.
    Thank you my friend
    Let's see that demo!

    • @mugstep
      @mugstep 11 месяцев назад

      You just unlocked how bug bounty hunters really make money.

    • @damavox
      @damavox 11 месяцев назад

      @@mugstep 🤣🤣
      I'm going to assume lots of sarcasm in that comment to which in hindsight.
      I completely agree.

    • @damavox
      @damavox 11 месяцев назад

      @@mugstep I'm sure jason haddix's course is full of information like that.
      At least enough for one to develop their own secret sauce but also I want to hear from different sources.

  • @ralphandre4438
    @ralphandre4438 Год назад

    This is amazing! I want to find my find my first live bug, paid or not before the year end. I would love the video demo.

  • @mynameisrezza
    @mynameisrezza Год назад

    Gold! Cant wait to see the demo of those vulns, thanks ben!

  • @hpuser-ui3tp
    @hpuser-ui3tp 9 месяцев назад

    Hey! I Would love to see the demo videos on each vulnerablity type.

  • @mrashco
    @mrashco Год назад +1

    Would love more in-depth videos on each topic mentioned!

  • @Sasquatchbones
    @Sasquatchbones 9 месяцев назад

    Honestly learned a lot really fast, clickbait was worth it 😂

  • @IvanIvanov-ix5no
    @IvanIvanov-ix5no Год назад +1

    I am looking forward to seeing a demo of those vulnerability types :)

  • @darklord5231
    @darklord5231 Год назад

    Yes we would like to see videos on each vulnerability

  • @akshaybhorde3787
    @akshaybhorde3787 8 месяцев назад

    It was very helpful for me. Good approach and techniques. Share your practical knowledge also.

  • @umegakweekene
    @umegakweekene Год назад

    Yeahh, please do demo vids on them. And practical low hanging fruits

  • @shurikenhacks
    @shurikenhacks Год назад +1

    Dude, clickbait us all you want. LOVE your videos! ❤‍🔥

  • @alexaliwarlock
    @alexaliwarlock Год назад

    That’d be awesome to see a demo video. Keep up the great and educational content! 🙌

  • @jkong3553
    @jkong3553 11 месяцев назад

    Def would love to see the demo. Very informative

  • @shriyanssudhi4545
    @shriyanssudhi4545 Год назад +1

    I'd love to see a video on Authorization issues.
    Though I've found some, but I feel I am missing something.

  • @nhlimon201
    @nhlimon201 Год назад +3

    Hey Ben, It will be better to share step by step resources to learn, master and get confidence of hunting for a specific bug. :) It would be a really awesome content. People like me sometimes get confused how they could master a bug and how to learn that at an insane level to get out of average hackers. So I hope you'll make this content in near future.

  • @panagiotismitkas5526
    @panagiotismitkas5526 Год назад

    Yes we want to see the hands on lab videos. About xss do you recommend kxss to see what is reflected?

  • @deekshithkalakotla9024
    @deekshithkalakotla9024 7 месяцев назад

    We want full video hands on each concept ❤

  • @sandeeppn1876
    @sandeeppn1876 Год назад +1

    Yes demo will be very helpful

  • @haroonrehman8156
    @haroonrehman8156 10 месяцев назад +1

    10:10 Yes Please We want to see it

  • @jeremyg737
    @jeremyg737 Год назад

    It would be awesome to see a video on encoding. Both from a defensive point of view and as a method of obfuscation.

  • @BoitumeloKhushiSelelo
    @BoitumeloKhushiSelelo Год назад

    it would be helpfull if you can share demo on how to find this vulnerabilities, thank you

  • @Drakan1990
    @Drakan1990 Год назад

    Want to see those demos! 🤘🏻

  • @ivanildofreitas7907
    @ivanildofreitas7907 Год назад

    Do a demo. We are eager to see that is possible. Nice and educational video by the way! Thanks.

  • @siddharthtayade3474
    @siddharthtayade3474 Год назад

    Yes. Need demo for the vulnerabilities.

  • @ismailsaid6389
    @ismailsaid6389 Год назад

    Man, for god sake i love your content

  • @AlexaSiri-u3z
    @AlexaSiri-u3z Год назад

    Thank you for the video. My question is --
    How do we find XSS if X-XSS-Protection header is placed on every page of a webpage?

  • @feedomomics8103
    @feedomomics8103 Год назад

    Hey great video, I have a question how to get pentests or rather how to get into pen-testing.

  • @youssefm5079
    @youssefm5079 Год назад +1

    Yeeees hands on videos and thank you so much ffor this content

  • @Mbro-dq2do
    @Mbro-dq2do 10 месяцев назад

    your videos are great Sec. Thanks for the knowledge

  • @SHADOW-uk2rq
    @SHADOW-uk2rq Год назад +1

    Hands on videos yessssss

  • @zukxxxx0
    @zukxxxx0 Год назад

    Actually, when played your videos liked them at the very beginning 😅😅😅

  • @hxmo656
    @hxmo656 Год назад +1

    For a new starter which bug bounty platform would you recommend; does it really matter whether we pick H1 / Bugcrowd VS a smaller place like Intigrity with less competition surely? 😊

  • @marlinshanklin-ww7em
    @marlinshanklin-ww7em 11 месяцев назад

    500$ works for me let's get started.

  • @Death_User666
    @Death_User666 Год назад

    Yes demos for all of them please please please
    I need to make extra money to afford my bills and I got 4 months left before I run out of money lol 😂
    I want to learn and I want to be good
    Another video idea could be reading bug bounty scope of work properly sometimes they are confusing to understand fully

  • @Ucsd4life
    @Ucsd4life 11 месяцев назад

    Demo video please! This is awesome content!

  • @socalledhacker
    @socalledhacker Год назад +1

    Now i am waiting for nxt Monday

  • @josephvelasquez2677
    @josephvelasquez2677 Год назад

    yes, please make demos on the mentioned vulns

  • @PhantasmagoriaVisions
    @PhantasmagoriaVisions Год назад

    Hands-on demo would definitely be a great

  • @elkins540
    @elkins540 Год назад

    I will like a hands on video of this type of vulnerabilities.

  • @CuriousByteYT
    @CuriousByteYT 9 месяцев назад

    Yes we do need a hands on explanation :)

  • @lukeempty3386
    @lukeempty3386 Год назад +1

    Do you think burpsuite pro is worth while if im just starting out. Almost done with the CBBH course from htb and then doing portswigger labs. I need burpsuite pro to do the portswigger certification though and not sure if its worthwhile if im just starting out

  • @gem0x00
    @gem0x00 Год назад

    Can you make videos for mastering a vulnerability or the most vulns needed alot of thinking to make the vuln have more impact

  • @lakshaysiwach3652
    @lakshaysiwach3652 Год назад

    yes absolutely a demo would be great

  • @Aravindb26
    @Aravindb26 Год назад

    Yeah practical explanation video needed naham ❤

  • @francisstocktilliii2413
    @francisstocktilliii2413 7 месяцев назад

    Yes I would love to see a demo

  • @aakash_386
    @aakash_386 Год назад

    🤓Who are we
    We are learners 🥳
    🤓What we want
    Demo 🥳
    Demo 🥳
    Demo 🥳

  • @TaminHay-hc7bq
    @TaminHay-hc7bq Год назад

    What do you think about tool nuclei?

  • @discount_ChadKroeger
    @discount_ChadKroeger Год назад

    I love anything cyber so im in. Especially on current bugs and news....Also duhhh show us the hands on.

  • @aavezsheikh5781
    @aavezsheikh5781 Год назад

    Yes demo of all the vulnerabilities plz

  • @ГришаФомин-о5щ
    @ГришаФомин-о5щ 8 месяцев назад

    чувак, спасибо тебе за этот ролик! он полезный , круто! продолжай в том же духе 🤘
    Хотелось бы подробнее с примерами о : SSRF, CSRF.

  • @prakhar0x01
    @prakhar0x01 Год назад

    appreciate Ben, Really amazing content.., well we want more content like this, but missing streams and interviews.

  • @hailelleultesera8643
    @hailelleultesera8643 Год назад

    make a video on authorization issues I would definitely watch that

  • @GoliTech
    @GoliTech Год назад +5

    Hi Ben, thanks a lot for the video, please make hands-on as well.

  • @RR-hl6zi
    @RR-hl6zi Год назад

    User engagement. Rawr.

  • @HariHacks22
    @HariHacks22 Год назад +1

    Theory + Demo 💯

  • @j4ck_d4niels
    @j4ck_d4niels Год назад

    maybe web tech video will be awesome, some common places to look for, like in swagger ui have xss with low-medium impact

  • @breakoutgaffe4027
    @breakoutgaffe4027 5 месяцев назад

    Yes please to the demos!

  • @tedwallace5640
    @tedwallace5640 Год назад

    Love the vid. Yes, please do demos...

  • @trendyzawwad
    @trendyzawwad Год назад

    it will be very much helpful to us, As a beginner we try to understand to of the vulnerability's and lost our most of the time's, If you do the hand's on video, may be it can push us to do more hand's on practice

  • @jamesdriscoll1658
    @jamesdriscoll1658 11 месяцев назад

    Yes please do a demo video.

  • @5checktech357
    @5checktech357 8 месяцев назад

    Yes, please, the video will be awesome.

  • @turtle6337
    @turtle6337 8 месяцев назад

    Hands on type of this video would be awesome

  • @naurismetlans8623
    @naurismetlans8623 Год назад

    Very good video, would like to see demos.

  • @jaredlee8883
    @jaredlee8883 Год назад

    Do a hands-on video of each please!

  • @husseindhooma5816
    @husseindhooma5816 Год назад

    Hi Ben, awesome video once again, would love for you to post more content on IDORs and Authorization Issues. Just by the way you don't need to click bait me to get to watch your videos, the whole reason I subscribe to you is cos your content is excellent. I would watch it anyways and support you any day. Would some day love to make a $500 Bounty (IA) but it takes a lot of practice and I just need to get my butt away from streaming crap in the evenings and studying. Thank you once again. Keep up the great work. 😉

  • @syedamer130
    @syedamer130 Год назад

    can't wait to see demo

  • @heatherryan9820
    @heatherryan9820 Год назад

    Great video. Appreciate the advice, and yes I'd like to see a hands-on. Any help I can get is always welcome.... Please?

  • @Progressive_Entrepreneur
    @Progressive_Entrepreneur Год назад

    Drop that video ! I’m a visual learner 😊

  • @musictunez7125
    @musictunez7125 Год назад

    Hands on video

  • @SohanRana-v6u
    @SohanRana-v6u Год назад

    can you please make a video on authorization ?

  • @hornedgod2873
    @hornedgod2873 11 месяцев назад

    Yes. Demos please.

  • @gem0x00
    @gem0x00 Год назад

    You're the best bro my role model ❤