Bug Bounties With Bash - VirSecCon2020 Talk

[@Gold_fi]

like seriously ..how I wish you do this more often- cos you're one of the best

[@cyberUF]

Hie I shared bugbounty , CTF challenge video you can visit me ❤️

[@RowanSheridan]

to save you guys a click - don't. Terrible channel.

[@GeorgeDran]

This guy is real MVP, amazing job on NahamCon2021! Thank you and please make more videos.

[@marcostorres572]

out on the porch, sippin on some hot cocoa and learnin bash scriptin ♥ thank you for an awesome vid

[@procybr]

No easier and cooler way to learn the command line from a real “Keyboard Cowboy”! Awesome work, your videos are much appreciated!

[@peterluke9392]

Criminally underrated channel, keep it up man great content.

[@ujjwalbansal1070]

I don't know why people like you with so much expertise in the field is having such a few subscribers! Why people are not seeing these JEMS on the internet. Trying to learn a lot from you keeps making such stuff for us.

[@husseinyoussef6998]

Would you say that learning bash in depth makes sense right now with LLMs emerging that can write great complex bash scripts from prompts?

[@maxb.4261]

you are the real deal and should be 100x more popular. please dont stop making these

[@JJ-dz2ne]

Wow, you're great at explaining things. Excellent video!

[@badrelmazaz]

please make more content like this I love your way to teach it's brilliant, thanks

[@MesonoxianVlad]

Great talk Tom. I always learn something new from your videos and I really appreciate your content. Cheers.

[@AzmahSmith]

Great Content 🎉

[@whativelearnedthisweek4518]

loved the video bro. I hope to see more about VIM and BASH tips on your channel. I swear to God, I could spent hours watching this kind of content.

[@eshansh_bhardwaj]

Simply Awesome😊

[@angeldev96]

Thanks so much for your talks, you are a true inspiration for most of us.

i saw the pdf late but it seems fascinating, thx for ur interest and presentation

[@kavishgour3267]

Thanks Tom. This is awesome. May you achieve more success in your life.

[@Daniel-wb2mm]

All I want for Christmas is for you to do more of these/ stream on Twitch!

[@padaloni]

you're an inspiration dude. love your work and thanks for sharing!

[@leisureclub_]

Much Love Tomnomnom .. You are one of my fav hunter @ Keep Rocking ! I just tried exiting vim & it is not hard as I noticed people tweeting..lol

[@clay0274]

that's amazing, I enjoyed to watch out. thanks a lot man

[@surferbum618]

Thanks for this Tom, I'll be processing this info for the coming months. Also, do you stream at all?

[@shivangraina9698]

Thanks tom i wish you could make more of these shell scripting videos. Big fan.

[@picanzo]

So ... First of all.. thanks for sharing all this valuable information and knowledge. I saw a talk you make about this 3 years ago.. and that was the way you found a lot of bugbounties back in the days, so you're basically giving us gold! Im just a n00b in here but I need to ask just to see if I understand... 1. we need to create like a wordlist but for subdomais 2. try requests to see the response.. like (404, 200, 301,302) to see it resolves.. Its that right? About the HTTP Headers.. you're telling us that its possible to find vulnerabilities by just reading that Headers? (like a passive recon) . Thanks again for sharing Tom!

[@an4kein]

Awesome TomNomNom, thanks! 👏🏻👏🏻

[@mstanford3]

Love your videos please make more soon

[@cutepanda2629]

Love from heart 🥰

[@mayurchavhan8590]

Great content Tom, Would like to see more. Thanks

[@aaronaguilar2238]

Thank you tom! I definitely enjoyed this video! A new subscriber now. Hope you make a new one soon.

[@soufianta8374]

Returning something else than 0 doesn’t always mean that command fails (it depends on the implementation of the return value in the program itself). Example: grep/egrep can return something else than 0 if it doesn’t find anything matching your query (that doesn’t mean that it fails) because it just depends on how the return value has been implemented (based on conditional cases). Nice vid btw

[@clindamycinphosphate4407]

legend is tom tom is legend!

[@jack.klimov]

Incredible! Thank you for tips and tricks

[@artanmulhaxha1525]

this was really helpful you are amazing man

[@sifatazad3353]

So at 38:00 i realised that its meg doing all the parsing!! 😂😂

[@xrfox1634]

Thanks for the awesome video!

[@h4cker]

Dude your terminal looks great ... What themes you are using ?? Please tell us??

[@thecaretaker0007]

Can you please continue this and make a whole playlist? Plzzz.

[@rodricbr]

epic video and channel, earned a well deserved subscriber, cheers from Brazil!

[@lukeastorw]

Which OS ( Terminal ) you use to do that? is that ubuntu??

[@D3rMesaa]

well that hour went by quite quick

[@watchlistsclips3196]

TomNomNom can you make some demo on how you create tools

[@leghdaf]

Great Content ....

[@arifinarifin3600]

beside that you explain things clearly, your voice is also nice to hear XD

[@shopflicker]

witch linux os u use??

[@DeShooter3]

Could you do a demo of bug bounty like only the recon part. I would like to see these tutorials in a real scenario.

[@AJRepp]

Stok has a video with Tomnomnom where he uses a lot of this info, in combination with vim, to do recon. Sounds like what you're looking for.

[@glengonsalves9547]

hey can someone explain me that cname part bt how does one claim the domain??

[@clindamycinphosphate4407]

tom sounds sooth

[@emanuelbergagna3678]

53:43 hahah

[@mohammadasil5937]

I want to learn from you pls create a playlist and upload more educational videos for our inspiration and for learning purpose

[@cypher4036]

Which os you sre using @tomnomnom

[@rodricbr]

ubuntu

[@danielazulay4936]

That's great, do you think doing bug bounty without vm is a good idea?

[@BlokeBritish]

i just want to kno how u took tat name. Tom and nom and again nom !!

[@StephenOgu]

Thanks TomNomNom

[@Rashedulcss]

This is a goldmine.

[@BnayaProgramming]

grepping headers at 42:00

[@suvarneshkm4845]

Can u make a video on public-firing-range !`

[@when542]

great video thank you!!

[@cyrusbesabella5938]

Thank you sir!

[@Aravindb26]

Bro post ur secrets on how to win easy bugs y im saying cause u have great knowledge and ur fans r waiting for that...

[@cyberUF]

Hie I shared bugbounty , CTF challenge video you can visit me ❤️

[@abdelabdel8089]

Hi. I liked the video that you've made with @STÖK. Can you please make an extensive video about how to read code using the debuggers and or tools? Would help starting developers like me tremendously and I believe you will make a great one. Thanks

[@waffen-ssyt6027]

genius

[@pato6350]

Broo I love yo

[@manikkoirala9576]

post more about bash scripting

[@elliot9066]

YOO i see filly video plz more video on bash bug bounty

[@bejanknaveen2274]

your super i love ur tools and way of hacking super sirrrrrrrrrrrrr

[@kavishgour3267]

Hey! any chance you could share your $PS1 config ? This looks awesome!

[@TomNomNomDotCom]

Sure; it's here along with all of my other config files: github.com/tomnomnom/dotfiles/blob/0433a3b3ca681cf3c9f894a401ecd5406ac22752/.bashrc#L143 (note the variables defined above that it uses)

[@kavishgour3267]

@@TomNomNomDotCom Thanks man. Cheers.

[@h4ck3r_SA]

i love you ..

[@labeh3750]

watch your hacking101...great video. I got a good insight on developer-tool.