How to Find Your First Bug

แชร์
ฝัง
  • เผยแพร่เมื่อ 3 ส.ค. 2024
  • I'm back! I have just handed in my PhD (not a dr yet, still need to have my viva), and I can finally get back to making weekly videos. I wanted to come back with a bang, so here are my top tips on how to find your first bug and my recommendations if you're struggling or having a hard time finding yours!
    Did you know this episode was sponsored by Intigriti?
    Sign up with my link go.intigriti.com/katie
    I'm so pleased with everyone's positive response to the Intigriti sponsorship and I'm so pleased you folks are finding bugs and even finding your first bugs! Thank you for being awesome!
    - Social Media -
    Discord: insiderphd.dev/discord
    Patreon: / insiderphd
    Twitter: / insiderphd
    Patreon Shoutouts
    Forrest Held
    L houssine
    josh
    Wardell Castles
    Gynvael
    Ram
    James Clee

ความคิดเห็น • 135

  • @skysunset877
    @skysunset877 3 หลายเดือนก่อน +1

    This is SO AMAZING😭😭 Nobody told me these kinds of insights. I really love this video!!!❤❤❤❤ Thank you SO MUCH!!!

  • @esk8monster848
    @esk8monster848 3 ปีที่แล้ว +3

    Great film , just what I needed as I’m feeling a little stuck in my hunting and learning right now .

  • @jmcsmtp
    @jmcsmtp ปีที่แล้ว

    Thank you so much for all that you do. Your videos have really helped me organize my process.

  • @sebastianm8028
    @sebastianm8028 11 หลายเดือนก่อน

    This was immensely insightful for me, thank you very much. Focusing on mindset more than other videos that I watched is really great

  • @playforpassion7111
    @playforpassion7111 3 ปีที่แล้ว

    Congrats on getting your PhD! (also thanks for the amazing content)

  • @limonhasan6723
    @limonhasan6723 3 ปีที่แล้ว +1

    love ur accents❤️❤️ thank you so much Insider PHD... love you and ur channel.

  • @anujpatel1654
    @anujpatel1654 3 ปีที่แล้ว +1

    Never stop making these videos pleaseeee 🙏

  • @che3tah205
    @che3tah205 3 ปีที่แล้ว

    since you gone, i found 3 valid bugs, several dupes and informatives.
    All thank to you.
    And happy you got back

  • @khushmanvar9038
    @khushmanvar9038 3 ปีที่แล้ว +6

    Hey Katie, I got my first IDOR just because of you. Thank You!!!

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +3

      AMAZING CONGRATS ON YOUR ACHIEVEMENT!!!!

    • @khushmanvar9038
      @khushmanvar9038 3 ปีที่แล้ว +2

      @@InsiderPhD Thank you!

  • @z-root8955
    @z-root8955 3 ปีที่แล้ว +2

    since I've started watching your videos and zseanos and nahamsec I actually started finding some cool bugs

  • @rishabhpant1828
    @rishabhpant1828 3 ปีที่แล้ว +16

    Literally, I was searching for this kind of video since few days

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +7

      I read your mind :D

    • @rishabhpant1828
      @rishabhpant1828 3 ปีที่แล้ว

      @@InsiderPhD by the time you commented I was halfway through your video :-)

    • @knocks42
      @knocks42 3 ปีที่แล้ว +4

      Can confirm @InsiderPhD is a psychic, because last time I was talking to some people about trying to find more time in the day for learning, right when she uploaded the "Getting Organised: Finding More Time in the Day" video.
      She IS the algorithm now lol

    • @rishabhpant1828
      @rishabhpant1828 3 ปีที่แล้ว

      @@knocks42 lol😂

    • @Abdul_rahman786
      @Abdul_rahman786 3 ปีที่แล้ว

      @@InsiderPhD wow what a answer

  • @antoniocarmo544
    @antoniocarmo544 3 ปีที่แล้ว +7

    I just want to say thank you! For real! Thank you for give us this really good content. I have been learning soooo much with you videos! I hope to see more content soon!

  • @abj1985
    @abj1985 2 ปีที่แล้ว

    Very neat explanation. Thank you.

  • @mymothermom4858
    @mymothermom4858 3 ปีที่แล้ว

    Woah you back, i love u 💖

  • @offmymeds13
    @offmymeds13 3 ปีที่แล้ว

    congrats on your phd and thank you for your content.

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      Thank you so much!

  • @docmalitt
    @docmalitt 3 ปีที่แล้ว

    best of luck in new PhD env, but also happy to see you back.

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      Thank you! I’m so excited to be back making content, going to drop some REALLY good videos (I think!)

  • @modmah7191
    @modmah7191 2 ปีที่แล้ว

    tyvm for the great contents!

  • @franz3810
    @franz3810 3 ปีที่แล้ว

    congratulations! It's nice to see you again in TH-cam

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      I’m glad to be back, I had a ton of video ideas I wanted to make!

  • @zeus-x0722
    @zeus-x0722 3 ปีที่แล้ว

    Welcome back Katie

  • @glengonsalves9547
    @glengonsalves9547 3 ปีที่แล้ว

    Awesome just what I needed

  • @yusufbabatunde8125
    @yusufbabatunde8125 3 ปีที่แล้ว +4

    I'm new to BB... First @InsiderPhD video I'd be watching, definitely not my last. I love humble teachers, I love the way you find time to like or reply comments under your video. I found a new teacher ❤️

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      Aww thank you, good luck with your bug bounty journey

    • @Anonymous-cx7ht
      @Anonymous-cx7ht ปีที่แล้ว

      You got you first bug ??

    • @skyedunphy
      @skyedunphy 6 หลายเดือนก่อน

      did you? @@Anonymous-cx7ht

  • @FantasM
    @FantasM 3 ปีที่แล้ว +2

    Long time no see @InsiderPhD It's nice to see you again.

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      Nice to see you too

  • @mi2has
    @mi2has 3 ปีที่แล้ว

    Good to see you back

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      Great to be back!!

  • @abhhibirdawade9657
    @abhhibirdawade9657 3 ปีที่แล้ว

    hey amazning katie!
    upps Dr. Katie
    Congrats on your pHD girl!!

  • @salahhisham3467
    @salahhisham3467 3 ปีที่แล้ว

    finallyy she's back !

  • @ronetteprinsloo5048
    @ronetteprinsloo5048 3 ปีที่แล้ว

    Yay a new Katie vid!!

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      I'M BACK! I missed you folks + making videos

  • @funkiimonke6129
    @funkiimonke6129 3 ปีที่แล้ว

    I love you're videos there so underated

  • @Mersal-uj5nh
    @Mersal-uj5nh 3 ปีที่แล้ว

    Look who's back 🔥🔥👍

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      I'm back and dropping videos weekly from now

  • @shayansec
    @shayansec 2 ปีที่แล้ว

    Great vid..lots of knowledge..It would be very helpful if you provide links of what you said in your description.

  • @hassan12141
    @hassan12141 3 ปีที่แล้ว

    Awesome Finally you are back

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +2

      YES! Feels great to be back, I missed making content a lot!

    • @hassan12141
      @hassan12141 3 ปีที่แล้ว

      @@InsiderPhD ❤

  • @eXfilPr4tik
    @eXfilPr4tik 3 ปีที่แล้ว

    AWESOME! ❤️🔥

  • @danielmcpherson9062
    @danielmcpherson9062 3 ปีที่แล้ว +2

    CONGRATULATIONS ON HANDING IN YOUR PHD!!! What are you becoming a doctor in? (amazing video btw)

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +7

      THANK YOU, I'm gonna be a doctor in Defence and Security, my PhD is about cyber security and machine learning!

  • @thefrickgeek1500
    @thefrickgeek1500 3 ปีที่แล้ว +1

    Cool, helpful content for BB beginners. Meanwhile I went through your how to find your first bug playlist.

    • @rmbassett58
      @rmbassett58 2 ปีที่แล้ว

      If you don't mind, how are you doing now?

  • @Bharath-wb8uy
    @Bharath-wb8uy 3 ปีที่แล้ว

    Thank you .

  • @lakshanperera9735
    @lakshanperera9735 2 ปีที่แล้ว

    thank you

  • @black_cr4ck
    @black_cr4ck 3 ปีที่แล้ว

    She's back 😄😄

  • @catbandit9525
    @catbandit9525 ปีที่แล้ว

    Thank you Dr Katie I have been trying to find actual information on API hacking ever since I heard about it. It is also especially neat to be able to learn this from a fellow female. Thank you

  • @techconsole
    @techconsole 2 ปีที่แล้ว

    video started first let me congrats you on your PHd

  • @cybersecurity3523
    @cybersecurity3523 3 ปีที่แล้ว

    Good Dr

  • @husseindhooma5816
    @husseindhooma5816 2 ปีที่แล้ว +1

    Wow I just stumbled upon this video, I am Sys Admin and have always had a passion for Hacking. (Who hasn't after watching Hacking Movies I guess) Just wanted to say thank you for the fantastic video, I have been floundering around for a while on various websites and checking out other content but this is really brilliant. Going to Binge watch all your videos to get a better understanding on Bug Bounties. Thank you once again

  • @SumitSingh-xu4qs
    @SumitSingh-xu4qs 3 ปีที่แล้ว

    THANK THANK YOU SO MUCH

  • @sihmy9870
    @sihmy9870 3 ปีที่แล้ว

    After a long time
    Glad to be here again
    Where have you been?

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      Heya, I was writing my thesis for my PhD, I wrote 50,000 words :o, basically a book, so took a step back but I'm back now and making weekly content!

    • @sihmy9870
      @sihmy9870 3 ปีที่แล้ว

      @@InsiderPhD wrote a book!!
      That's brilliant
      Keep up..
      What's your next goal?

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      The same number of subscribers on TH-cam ;)
      And the same number of bugs, but that may take a while!

    • @sihmy9870
      @sihmy9870 3 ปีที่แล้ว

      @@InsiderPhD time doesn't matter when you're upto something good....
      Just keep going and time will thank you one day for these efforts...

  • @CallmeHunterbaby
    @CallmeHunterbaby 3 ปีที่แล้ว

    very good

  • @dil1585
    @dil1585 3 ปีที่แล้ว

    you are awesome ❤❤❤❤💖💖💖💖

  • @razdingz
    @razdingz 3 ปีที่แล้ว

    congrats on the PHD submission

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      Thank you! Dr soon (tm)

  • @offmymeds13
    @offmymeds13 3 ปีที่แล้ว +1

    Sorry if you have done this before but maybe you could make a video explaining why its important to look for JS files and how to look at them and what to look for. Just an idea. You explain things very well to me.

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      Added to the list!

    • @Fengquan
      @Fengquan 2 ปีที่แล้ว

      have you learning html before, if you want jump into website, you must learning js.

    • @Fengquan
      @Fengquan 2 ปีที่แล้ว

      if you only want find bug in website, you could only deep learning about DOM, JS. Beacuse a lot of website use third party JS with a lot of bug.

  • @SumitSingh-xu4qs
    @SumitSingh-xu4qs 3 ปีที่แล้ว

    Really awsm tips thanksssssssssssssssssssss

  • @electrokid9492
    @electrokid9492 3 ปีที่แล้ว +1

    ❤️❤️

  • @ca7986
    @ca7986 3 ปีที่แล้ว

    ❤️

  • @MrFtothelo
    @MrFtothelo 3 ปีที่แล้ว +3

    That two people who gave dislikes will never find a first bug

    • @pacboy4686
      @pacboy4686 3 ปีที่แล้ว +1

      they are 3 now, haters everywhere

    • @thepianoaddict
      @thepianoaddict 3 ปีที่แล้ว +2

      Maybe they were just checking the dislike button for bugs.

  • @hybridboy9_9
    @hybridboy9_9 ปีที่แล้ว

    bug bounty is very disappointing 😔
    When i was in school i wanted to be a hacker...after completing twelfth i completed web development course from an institute...i am good in html, css, JavaScript, php, mysql...
    i am trying to find a job but its very hard nowdays, i dont have cs degree...
    i watched few videos on TH-cam about bug bounty then i was so excited about going towards cyber security and thought that bug bounty is a good option to start with...i am a beginner but i am good in web development so i pentested few sites...but as you know its very time taking process...but still i was keep looking for a bug then i found open redirection and xss on two different sites...i was so happy i thought this will give me a push to enter in this field...i searched about how to send report about this and found one of your video i followed and created report then sent it to their email...its been more than 5 days i haven't got any response from them 😔😔☹

  • @noureldinehab2686
    @noureldinehab2686 3 ปีที่แล้ว

    💙

  • @jpineda79
    @jpineda79 ปีที่แล้ว

    hi, is ZAP falls under the automated tool? Sorry im new in bug hunting, the first program im taking with doesn't allow automated tools.

  • @thebrotherhood1675
    @thebrotherhood1675 3 ปีที่แล้ว

    what would be a SIGN for an application that uses Kubernetes or docker? (when looking at CI/CD pipelines as discussed in the episode with mr chapman)

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      Great question! I’d say continuous deployment is a good sign, so features being released quickly, also many smaller services and potentially careers pages which mention specific technology

  • @thebrotherhood1675
    @thebrotherhood1675 3 ปีที่แล้ว

    is it true that these bounty programs on sites like hackerone etc have already been tested by quite senior pentesters? before they even end up as a VDP

  • @bharathpatel1757
    @bharathpatel1757 3 ปีที่แล้ว

    Hi dhidhi please could you tell me what to do if my mail got pwaned.. recently big basket a most used Application selling groceries got hacked and all the users data have been sold in darkweb . What to do if our mail got pwaned ? Do we need to delete that mail which had pwaned ?

  • @Free.Education786
    @Free.Education786 3 ปีที่แล้ว +1

    Thanks. You and your channel is world best channel who teaches noobes from 0 2 h3r0. Love U Respect U Salute U 🤝❤💙💚💐👍

  • @JeremyHale141
    @JeremyHale141 2 ปีที่แล้ว

    I am an entomologist looking for a video on how to find more bugs, well, not sure if this helped. I checked the Orb Weaver web and everything is dead.

  • @xdmotivation
    @xdmotivation 3 ปีที่แล้ว

    Good

  • @goebbelsx
    @goebbelsx 3 ปีที่แล้ว +3

    Love British accents :)

  • @sabyasachimitra9644
    @sabyasachimitra9644 3 ปีที่แล้ว

    Is learning javascript enough for this, well I am perfect in python but do I need to learn backend languages

  • @giacomoflisi
    @giacomoflisi 3 ปีที่แล้ว

    pog

  • @DOMPurify.isSupported
    @DOMPurify.isSupported 3 ปีที่แล้ว

    i hope i get my bounty soon its been a while since i started and have no idea what i am doing wrong

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      You're not doing anything wrong :) it takes time and you'll get it eventually, just keep going!

    • @DOMPurify.isSupported
      @DOMPurify.isSupported 3 ปีที่แล้ว

      @@InsiderPhD Thank you Katie

  • @kumaran88thiru
    @kumaran88thiru 3 ปีที่แล้ว

    Hey miss you

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      missed you too + everyone else, I'm so happy to be back creating!

  • @hexbrokers9115
    @hexbrokers9115 3 ปีที่แล้ว

    I am a student of bs computer science so what should I want to do for getting PhD and make career in bug bounty ??? thankx

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      If you think you want to get a PHD I highly recommend the book “How to Get a PhD” which goes over all the steps in a PhD and will really make you think about whether or not it’s something you want to pursue. As for full time bug bounty hunting check out my video with Alex where I interviewed him on full time bb and how he decided to do this full time. Quite a lot of it was about specialising, having bugs you know you can find and building up consistency over time. I will say that lots of bug bounty hunters work full time, usually in security but you also see a lot of people who work in bug bounty as program managers, triagers, etc.

    • @hexbrokers9115
      @hexbrokers9115 3 ปีที่แล้ว

      @@InsiderPhDand what about cyber security and bug bounty career

  • @happychannel2616
    @happychannel2616 3 ปีที่แล้ว

    Hello

  • @piyushacharya7696
    @piyushacharya7696 3 ปีที่แล้ว

    You are my favourite....

  • @mohamedfakhri2390
    @mohamedfakhri2390 ปีที่แล้ว

    Can I learn cyber security or python by phone

  • @shrirangkahale
    @shrirangkahale 3 ปีที่แล้ว

    🔥🔥🔥

  • @learnwithpikes
    @learnwithpikes 3 ปีที่แล้ว

    when are you making that grep video with tom

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      Soon! :) we’re brainstorming what we want to do!

  • @faique2995
    @faique2995 3 ปีที่แล้ว

    Make a video on Amass

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      Coming very soon! Plus more videos on Recon!

  • @cryptonative
    @cryptonative 3 ปีที่แล้ว +2

    Scare them 😂

  • @bolajioyewo1515
    @bolajioyewo1515 3 ปีที่แล้ว

    Yeah sure, definitely missed you.

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      I appreciate that! I hope the content I have lined up fill that bug bounty void I left!

  • @alph4byt3
    @alph4byt3 3 ปีที่แล้ว +1

    do you really say integrity or is it the English accent that makes it sound that way?

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว

      I'm pretty sure it's integrity, I am 100% basing it off of other creators and "that makes sense" though :D

    • @alph4byt3
      @alph4byt3 3 ปีที่แล้ว

      @@InsiderPhD interesting

  • @Sanitised
    @Sanitised ปีที่แล้ว

    I thought this was about insects.

  • @ArteofTransmutations
    @ArteofTransmutations ปีที่แล้ว

    Uma legenda em espanhol ou em português ajudaria muito ,obrigado pela atenção.

  • @njsportsentertainment7033
    @njsportsentertainment7033 2 ปีที่แล้ว

    Please teach me how to hack a Facebook account on phone

    • @Saur3n
      @Saur3n 2 ปีที่แล้ว

      Whose account

  • @hexbrokers9115
    @hexbrokers9115 3 ปีที่แล้ว

    love from Pakistan :: 0x000

  • @happychannel2616
    @happychannel2616 3 ปีที่แล้ว

    3 cmnt

  • @chuckyyes
    @chuckyyes 3 ปีที่แล้ว

    I feel like this video could've been done in 10 mins. Oh well anything to stretch out the video longer to get more money to pay for that PHD college debt am i rite?

  • @AnthonyMcqueen1987
    @AnthonyMcqueen1987 3 ปีที่แล้ว

    Lets see if this helps because your told me searching for XSS is a waste of time.
    Which is not good enouragement for someone struggling to find their first valid bug. Real world advise would be better than discouragement.

    • @InsiderPhD
      @InsiderPhD  3 ปีที่แล้ว +1

      Sorry if you thought it was discouragement! I think XSS is REALLY hard for beginners to find, because XSS in the wild tend to require a lot of bypasses which beginners may know, with that in mind if you know JS, if you've put time into XSS, you absolutely should keep looking!!!

    • @electrokid9492
      @electrokid9492 3 ปีที่แล้ว

      @@InsiderPhD ya you are correct mam , I think the very begginer friendly bug is IDOR or SSRF because in XSS you get frustrated and burn out your self .

    • @AnthonyMcqueen1987
      @AnthonyMcqueen1987 3 ปีที่แล้ว

      @@InsiderPhD 8 months and if am learning SQL injection on the side.

  • @mdshahidurrahman8111
    @mdshahidurrahman8111 3 ปีที่แล้ว

    ♥️

  • @nullmonk
    @nullmonk ปีที่แล้ว