วีดีโอ

In this video I further expand on recon fundamentals with some tool examples, and a quick overview of tools to watch in 2022 (Trufflehog, Caido, and SecurityTrails SurfaceBrowser)

Why do you duplicate so much when doing bug bounties? How to dupe less. ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo

Let's talk about open redirections, their impact, and common mistakes made when submitting them to bug bounty programs. ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo ▬ Table of Contents ▬▬▬▬▬▬▬▬▬▬▬ 0:00 Introduction 3:52 the '@' operator 5:18 Intentional Redirects 6:41 Escalating

Let's talk about what you should consider, before deciding whether or not to do Bug Bounties full time for a living. Written companion guide: www.bugcrowd.com/blog/the-shocking-truth-you-may-not-know-about-being-a-full-time-bug-hunter/ ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo ▬ Table of Contents ▬▬▬▬▬▬...

Let's discuss the fundamentals you need to properly understand recon as it relates to security. ▬ Participate in the building of content ▬▬▬ ✭ Twitch: www.twitch.tv/codingo_ ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo ▬ Table of Contents ▬▬▬▬▬▬▬▬▬▬▬ 0:00 Introduction 1:21 Active and Passive Recon 3:12 Wid...

A quick discussion about impostor syndrome and some thoughts about how to better discuss it in information security. ▬ Participate in the building of content ▬▬▬ ✭ Twitch: www.twitch.tv/codingo_ ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo TOF_gYIEYWBIW5dZIVcWG842tKME9AIh

Let's discuss common mistakes people make when reporting Authorization based vulnerabilities. ▬ Participate in the building of content ▬▬▬ ✭ Twitch: www.twitch.tv/codingo_ ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo ▬ Table of Contents ▬▬▬▬▬▬▬▬▬▬▬ 0:00 Introduction 1:13 Video Goal and Intentions 1:41 Forg...

Let's discuss the fundamentals of recon and OSINT on a corporation using the Rapid7 Open Data project, and DNSGrep for Pentesters and Bug Bounty Hunters ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo

Let's discuss the fundamentals of Burp Suite configuration and extension management, and why it's important for pentesters, and bug bounty hunters. ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo

Let's discuss the fundamentals of scope, why it exists, and what happens behind the scenes. ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo

Learn the difference between DDoS and DOS, and what makes for a valid bug bounty report. ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo

Discovering Amazon AWS, Google Cloud, and Microsoft Azure assets, externally ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo ▬ Additional Resources ▬▬▬▬▬▬▬▬▬ ✭ hakluke/status/1350553428242493440 ✩ steemit.com/amazon/@calastinone/amazon-warns-admins-and-updates-the-aws-dashboard

As a beginner, what operating system do you need to hack? Let's discuss. ▬ Continue the discussion ▬▬▬▬▬▬▬▬ ✭ Twitter: codingo_ ✭ Patreon: www.patreon.com/codingo ✭ Facebook: codingo ▬ Additional Resources ▬▬▬▬▬▬▬▬▬ ✭ Windows Subsystem for Linux Installation Guide for Windows 10: docs.microsoft.com/en-us/windows/wsl/install-win10 ✩ What is a Virtual Machine: vmware.com/...

How to duplicate less with Bug Bounties

Better Bug Bounty Tool Results with DNSValidator

Hacking Tips - Finding new Tools and Techniques Using Github

Subdomain Takeovers, beyond the basics for Pentesters and Bug Bounty Hunters

$2000 Pentesterlab Giveaway

Getting started with Github for Security Professionals and Bug Bounty Hunters

Better Bug Bounty Reporting with BBR

How to Master FFUF for Bug Bounties and Pen Testing