2023 WebApp Pentesting/Hacking Roadmap // How To Bug Bounty

[@NahamSec]

Want to learn directly from me? Check out my course here: app.hackinghub.io/hubs/nahamsec-bug-bounty-course

[@rdx8122]

00:00 = Intro 00:45 = How the website works 01:56 = Curl / Linux basics 03:10 = Scripting 04:34 = Basics of Web application Hacking, Don't depend on Automation 07:49 = Learn JavaScript For me personally this was not a roadmap, it was more like tips and tricks to upgrade my existing roadmap 😂😂, anyways, thank you very much Naham sir, following you further to learn a lot of stuff 🙏🙏💖💖 Love from India 🇮🇳 🇮🇳 🇮🇳

[@oviyanthelearner7656]

Bro can you tell about where to practice web hacking

[@nishantdalvi9470]

@@oviyanthelearner7656 port swigger academy

[@NahamSec]

Added to the video. You the best!

[@rdx8122]

@@oviyanthelearner7656 there are a lot them out there, explore them online, like tryhackme, hackthebox, especially portswigger and lot more !

[@rdx8122]

@@NahamSec thank you sir 🙏🙏❤️❤️

[@superkool7]

Fuck. I just realized something while watching this. I’ve been into this for 2.5 years. Maybe 3. And I’m still finding myself watching these roadmap - how to become a bug bounty Hunter - videos. Damn. What can I do. Seriously.

[@akhtarmohana2999]

Disconnect for a while. Do something else. Then come back with a fresh mind

[@chaospixxie]

I've just started learning curl. Still trying to wrap my head around it. Baby steps 😊

[@NahamSec]

You got this! curl is going to be very helpful especially when looking at APIs!

[@firzainsanudzaky3763]

how's the learning my man?

[@romeoromeo7002]

Hi Ben, I am your huge fan i love your work immensely and your vlogs about live hacking events are as good as your other KZbin content . My question is that I’m currently in Canada and my studies will be over in next month like in Aug 2023 but I am lost in my path I don’t know what to do I am unable to find an internship or job so I needed your guidance and i also want to mention that I have successfully done your udemy course and i am currently preparing for PNPT by TCM security so If i could connect with you and talk about job search and other things then it would be really awesome.

[@arijitdas9115]

Great video as always mentor !

[@bolivianPsyOp]

came here from the live stream. and dropped a sub

[@shaifsec]

You are legend sir , Always Appreciated.

[@rahmat_qurishi]

Great as always🎉

[@NahamSec]

Thank you so much 😀

[@bugs-lk3jf]

like a Boss; Great Content Nahamsec ...

[@axelieve]

How important do you think learning Python to an intermediate level is for a bug hunter? Awesome video!

[@RivuDonTech]

Thanks for video ! Keep making more.

[@NahamSec]

Thank you, I will

[@Eric-ey7rm]

Just found your channel. You seem like a kool dude. Buying your BB Course for my barely 12 year old who lives on hack the box and is always on port swigger site. Hes actually trying to get me into it, but i think i like more actual network pentesting then web apps. That looks way too difficult for me.

[@NahamSec]

Hey Eric. Thanks for the comment and thanks for supporting the course! That’s awesome that your son! If I can help him in anyway please let me know. Happy to even chat with the both of you on a zoom call if it helps motivate you guys to get into hacking. Feel free to email me! My emails on the about page of the channel. Go after whatever you’re passionate about. Whether it’s network, web, social engineering regardless of the difficulty. IMO that’ll drive you overcome the hurdles more than anything else. Best of luck!

[@joeshmo546]

So how in depth should you know about how websites work? Also do you have any prefered resources for learning these skills?

[@denizyildirim116]

Hey man, thanks for your content. Since you mentioned SSRF being network related, I come from a networking and netsec background with 10+ years experience. What hacking track do you recommend me to go where I can take of use my knowledge in networking?

[@Curiousao10]

Knowledgeable Content

[@shinobi0x1]

Thanks! For the ADVICE!

[@nextbillionaire2513]

Actually I needed it. Thank you so much for making this video... ♥✌

[@NahamSec]

Welcome!!

[@g1zmo85]

Thank you for this video, very good info

[@kenkaneshki432]

For the first step Learning how the websites and internet works, what book should I choose to learn that how internet and websites works or do you have any resources plz tell me

[@mametube6654]

Love from Ethiopia❤

[@NahamSec]

[@m3nt0rz.haxx0r2]

Came here from your live

[@gl0Star_Rx1]

How to find bugs from view-source? I want a video of this 😊

[@rdx8122]

You mean finding bugs in JavaScript ? that's a great topic a video @NahamSec

[@Meenimie]

I suggest you use more visualization in your video, such as the terms, definitions.

[@lzxser6470]

thanks, greetings from turkey

[@uniskhan3815]

Very knowledgeable video ❤

[@NahamSec]

Thanks a lot 😊

[@uniskhan3815]

@@NahamSec your welcome sir❤

[@1DRS]

Thanks for video .liked it

[@nadakuditigopikrishna6587]

Thanks for the guidance!!

[@amoh96]

as beginner it's really hard to me the part of recon ( DNS , ASN,DNS Records, Revers Ip,,,,,) This stuff about Network i only do basic recon gather subdomains & some google dorks :( is that ok for beginner im in 6 month in bug bounty ??

[@mohammadalihanfi8237]

After this what are books you recommend to read

[@Mehrab-r3y]

Hi, I came from your stream

[@krishshah344]

Any sources to learn this stuff from? Curl, JS for hacking, basics etc...

[@mohammadalihanfi8237]

And ctf to start with after learning these basics

[@rahulacharya8159]

Again I am first viewer 🥳

[@shubham_srt]

nah i won this time 😆

[@NahamSec]

you both win!

[@amoh96]

Thanks keep making more videos for beginners :)

[@NahamSec]

More to come!

[@Andrei-ds8qv]

Hey hey, nice video, thanks!

[@krishg767]

Please 🙏 keep it up more and more videos....

[@DheerajMadhukar]

Its a nice watch .... Which watch it is ? :)

[@youssef-kz3yn]

Do i need to study the a plus content or something like that to get into bug hunting

[@terrymac-tay5597]

Thanks for the video. I purchase your course on udemy and I'm loving it. I have one request to ask, could you connect me to someone I can pair with and we can learn together? Thanks again

[@NahamSec]

Come join the discord!

[@shaifsec]

need resource to know more about DNS Configuration | DNS Records

[@mikiminac251]

i reported the vulnerabilities but they are all invalid

[@markfuentes3666]

Great Video. I am looking for a good video on curl.

[@NahamSec]

Maybe I'll do it in my next project :)

[@HelloThere-xs8ss]

easy: man curl

[@HalfDeaff]

came from the livestream

[@bugs-lk3jf]

thank you so much 😎

[@MP-eq8fx]

Please give the link to the video you said at the beginning.

[@NahamSec]

In the description but here you go Does Cybersecurity Require Programming? kzbin.info/www/bejne/jYLEmnaigcmpias

[@MP-eq8fx]

@@NahamSec Thank you very much 💗

[@MFoster392]

Thanks man ;-)

[@zerocool2765]

Why is everyone focusing on web bug bounty? Why not mobile and other platforms?

[@epicotakugamer4930]

money and because it's the first line of defense

[@vedant.p.baghel8944]

what are the different fields in ethical hacking

[@codesaif8075]

How much demand of Ethical Hackers is ?

[@TonyAsh-rp6fp]

good content.

[@stabilizer7225]

awli bood❤❤

[@vineet1]

Came here from LIVE

[@GoliTech]

ur the best dude

[@moh5entuky940]

For scripting we should learn Python or Go?Which better? and how learn Scripting?

[@a.g.4843]

With Udemy…

[@moh5entuky940]

Witch course? @@a.g.4843

[@shubham_srt]

1st 🥵

[@0XmsAhmed]

I want to know API hacking tips and tricks from you. 🙏🙏🙏🙏🙏

[@NahamSec]

Soon!

[@Adarsh.-.]

@@NahamSec waiting dude

[@lukeempty3386]

​@@Adarsh.-.check out apisec University

[@tecksec]

Need the API hacking too 🎉

[@lukeempty3386]

@@tecksec TCM security just released an API course

[@mehdi_sf7257]

best content

[@syedrafi3704]

Hi i am from india. I want a great high paying career. On which skills i need to focus and get remote job while i stay in india. I am from non IT back ground. Thank you.

[@cynerboy]

Will penetration tester jobs be replaced by artificial intelligence?

[@HelloThere-xs8ss]

Machine learning tools are already being used in security operation centers.

[@harshsharma7505]

still bug bounty is not a robust career!!! spending time on vuln machines and web apps is more important to know more about bugs. Bug hunting should be a part time and a just for fun game. No offense , but it is a matter of duplicates and reality.

[@iramdolal488]

from the stream

[@nareshrapthadu8262]

Can you please make a video on writing PoC of Bugs

[@Sharif365]

Where are the basics of networking ? 🙂

[@Zillah_D]

tnx but better if it was tear by tear and more step

[@alagunoff]

Thanks

[@voyageur1016]

احبك في الله 😅

[@amoh96]

hhhhhhh

[@amoh96]

finelly :D

[@securibee6016]

🐝

[@denildavis3561]

nahamsec . I am working as security in UAE. but I am from India. I fed up with my job because it is very boring. now I started learning about cybersecurity. can I change my job to bug bounty. I want a job that i can work from home. security job is not very interesting . cybersecurity seems to me very interesting

[@ByteHax_]

Api hacking roadmap guru ji

[@ralphandre4438]

Finally 😂😂

[@vedaty.8259]

Bir de Müslüman olsan süper olurdu naham dayı

[@EnglishLearn-time]

ایرانی هستی

[@uaebikers]

Definitely not a roadmap lol but thanks for the tips.

[@NahamSec]

Thanks! What should I do different next time so it's an actual roadmap? Should I specify where to learn them and what courses/sites to use?

[@cguzmanvisuals]

Lmfao this guy wants latitude and longitude 🗺️🗾📍😂😂😂

[@uaebikers]

@@NahamSec I recommend making a roadmap for a period of time like 6 months with detailed plan, goals and milestones. Maybe even make a playlist discussion each step of the roadmap.

[@black53342]

Buddy wants spoon feeding.....

[@uaebikers]

@@black53342 I want things to be called as they are without click baiting! Go simp somewhere else!

[@moh5entuky940]

For scripting we should learn Python or Go?Which better? and how learn Scripting? Thank You for your helps@NahamSec

[@mereemail8352]

Can u please make a video on hoelw to effectively map the web app and discover hidden functionalities

[@NahamSec]

Maybe :-)

[@EmeraldCowboy]

thx for video

[@brs2379]

Regexes

[@behrozarshiya]

i think review owasp better thing for start learn hunting

[@mereemail8352]

❤️