How to Look For Virtual Hosts // How To Bug Bounty

Here's the demo from the video
app.hackinghub...
📚 Purchase my Bug Bounty Course here 👉🏼 bugbounty.nahamsec.training
💵 Support the Channel:
You can support the channel by becoming a member and get access exclusive content, behind the scenes, live hacking session and more!
☕️ Buy Me Coffee:
www.buymeacoff...
JOIN DISCORD:
discordapp.com...
🆓 🆓 🆓 $200 DigitalOcean Credit:
m.do.co/c/3236...
💬 Social Media
/ nahamsec
/ nahamsec
twitch.com/nah...
/ nahamsec1
#bugbounty #ethicalhacking #infosec #cybersecurity #redteam #webapp

[@jonathanvillatorocordoba7511]

Yes, please do make more videos like this one! And, thank you so so very much for putting all of this online!

[@prakhar0x01]

Really appreciate ben that you use screen-recorder, also literally amazing helpful content🔥, we want this kind of videos in the future also, Thanks for your efforts. 🙌

[@NahamSec]

Thanks! Will continue to record the screen with this new software since it’s looking way better!

[@abhinavkumar8052]

@@NahamSec Yeah video is much more clear now
Have you tried palying with the bitrate and all with previous software

[@shohaghasan5641]

Today I completely understood this after watching your video.
Thanks a million, Naham!

[@NahamSec]

Glad it was helpful!

[@MarkFoudy]

Absolutely please make that video. Virtual host scanning is kinda of under appreciated and rarely explained. Thanks as always for a great video and for taking the time to go over this.

[@hssain.aitkadir]

Actually this is one of the best videos for me because of the simulation of the attack surface

[@mdalex-sj2ek]

Hello i am shakib form bangladesh. This video is really help full to understand what is virtual host in short(vhost) ... i love this content

[@normalitee0os]

Ben, Just wanna say You are amazing! Your work is amazing! THANKS A LOT FOR ALL THESE CONTENT FOR FREE!

[@AbdAlkarimTube]

Continue with this pretty clear content, That makes hunters know the process. and nice word هكر

[@abhishek_k7]

Congrats on 100k subs! Thanks for this great content as always!

[@tonymontana492]

New things for me bro thank you for your effort to help us in this journey.

[@AbdAlkarimTube]

Also it's not necessary to to brute force with the same domain, You can catch other domain with same IP in vhosts.

[@_0x01m]

thank you for sharing .. for me i prefer doing subdomain enumeration using ffuf with vhost brute forcing host header it effective

[@pr0tagnist]

Bro this is gold!! Keep going.

[@علاءالحاج-ظ4س]

Amazing content thanks ben

[@n0lsec]

Nice tips, thank you Ben🔥

[@monKeman495]

make videos about your findings without telling targets name or any asset just step to reproduce kinda things

[@NahamSec]

Check out my but bounty stories series. I started it last week ;)

[@jackchan2689]

ممنون عالی بود

[@mrblackhat8088]

its like hack the box ctf woww nice tips

[@adyp487]

This is super useful for work

[@shashankmudgal4581]

Awesome video, but I wanna ask what if the target is behing a WAF?

[@adyp487]

yes, please make those videos :)

[@atifalam537]

I am facing problems with adding hosts on /etc/hosts I am not able to open the subdomain it says invalid hosts can you please solve thank you

[@jjjjjkkkkk]

Good video Ben

[@abdilahrf]

What if the domain we are targeting using a load balancer that is resolved to different IP for each request to the domain or hiding behind cloudflare?

[@shaifsec]

Sir, I want to know more about Vhost

[@allmedia77]

I wat to learn bug hunting in deep level so what can i do?

[@ghulamyaseen538]

You never made a video on blind xss?

[@HackAll-ue3sr]

Can you please suggest me resources to learn for bug bounty .. I am currently going for portswigger labs

[@NahamSec]

Check out my how to bug bounty videos on my channel!

[@HackAll-ue3sr]

Ok thanks

[@Saur3n]

Portswigger is enough i think

[@HackAll-ue3sr]

Thanks

[@ruttalaabhinav8105]

Make a video on virtual hosts deeply

[@supreme-erg9875]

Nahamsec, how do you create CTFs? I am in a cybersecurity class and I took on the task of trying to create CTFs for a project. How am I supposed to code front end and know how to make vulnerable code in the backend? Do you use frameworks or reuse code or start from the bottom?

[@allmedia77]

❤

[@free_user]

Nice T-shirt ❤️👀

[@NahamSec]

Thanks 😋

[@free_user]

@@NahamSec you're welcome.

[@piegon717]

i like that shirt is says hacker in arabic 😂

[@Arian-e7t]

من این تيشرت رو میخوام!

[@mo938]

Isn't this more of a 'how to identify reverse proxies' vs 'how to identify virtual hosts'? A virtual host, in my eyes, is more along the lines of something like ESX or Hyper-V

[@amirhosseinizadi3094]

[@shashikiran00]

Waiting for first Bug Bounty finding can u help me @Nahmsec more than 8 months No Bounty's

[@NahamSec]

It'll happen soon!

[@shamim_12]

I want this tshirt, from where can I get it ? @nahamsec