Bug Bounty Hunting - Tools I Use

[@TalsonHacks]

02:40 Foxyproxy 03:06 Cookie Editor 03:26 Wapplyzer 04:10 Wfuzz 04:50 Dirbuster 05:20 Knockpy 06:46 Sublist3r 07:50 Seclists 09:10 Scrapy 09:40 CyberChef 10:25 WhatCMS 11:37 SQLMap 12:03 Striker

[@kanekarter1249]

You all probably dont care at all but does anybody know of a method to get back into an instagram account? I was dumb lost my password. I would appreciate any tricks you can offer me.

[@ibrahimbo880]

@Kane Karter Instablaster =)

[@kanekarter1249]

@Ibrahim Bo i really appreciate your reply. I got to the site on google and im in the hacking process atm. Looks like it's gonna take a while so I will reply here later with my results.

[@kanekarter1249]

@Ibrahim Bo It did the trick and I actually got access to my account again. I'm so happy:D Thank you so much you really help me out!

[@ibrahimbo880]

@Kane Karter No problem xD

[@spetsnaz_2]

You are uploading most wanted videos that an Aspiring Hacker would be looking for...Thanks so much!

[@dxlultra1020]

You have no idea what it takes to be considered a hacker by people who do that shit for a living professionally, and this dude doesn't even do it..

[@dxlultra1020]

@@SumitSingh-cr6gg Damn straight keep those views on me as above you (which i am), and stay in your 3rd world country

[@dxlultra1020]

@M. ALI Mmmm...because you sound intelligent. According to your dumbass knowledge is based off of subscriber count? My god people like you just give people who actually are "hackers" a bad rap. Get your corny profile picture the fuck out of here...your just another wannabe "hacker"

[@sorrybadbeat]

@@dxlultra1020 Says the person who calls people who expose vuln "not real hackers" good "not a true scotsman" fallacy. You sir are a fucking moron living in your moms basement, you have no idea what a hacker is.

[@ligeskityler]

Fuck off don’t kill his vibe, and dreams you’re an asshole

[@Z3kyTw0]

Bro you rock man. I have learned more from you then my 4 years in college. Thank you

[@an4ndmi5hra67]

The best KZbin channel found ever on Cybersecurity. Thank You !

[@Z3kyTw0]

agreed

[@PraveenSinghHacker]

Please continue this "bug bounty" tutorials . Upload those as fast as possible . Actually needed

[@Aokiyoa]

or there are books too.

[@PraveenSinghHacker]

@Septimus .. can you mention some of them ?

[@PraveenSinghHacker]

@@Aokiyoa ..

[@Aokiyoa]

@@PraveenSinghHacker www.ethicalhacker.net/category/features/book-reviews/

[@bruerthebruisermaddermudde9384]

@@Aokiyoa 😶😐🤣🤣🤣🤣 I didn't know Google liked to watch KZbin 😶

I Love this guy hes Awesome, Hes the best for Explaining Everything and at least Talks not like all them other People that expect you to figure out from moving their mouse over something thinking your mind reading what they are trying to say....

[@prawnstarrr]

Great content been subscribed for many years one of the best channels relating to pentesting and not all just about github tools and scripts naming no names lol

[@shokobata]

u have the same profile picture as me in facebook :/

[@djebabliazakaria4593]

faraway

[@MeetPatel-sk7pu]

This is very nice decision to start this series.good job brother. We are here to follow you forever.

[@orkidokomlan8544]

Dude where have you been ALL MY LIFE when I was taking my cybersecurity degree? Lol THANK YOU. New subscriber here. 👊🏿👊🏿

[@Damuskinous]

Mate please keep it up. Its helping guys like me finally see something in cyber sec, fun enough to make me learn it. Bug bounty is something you can even pick up on the side to learn and make passive income.

[@brentmentor1782]

That background looks amazing

[@dacoldheartd4080]

Indeed

[@memeszone2517]

Yes Really it looks sexy

[@Hari-888]

yup, anyone know where it is from?

[@karthikeshwaran6736]

​@@Hari-888 did you found?

[@Hari-888]

@@karthikeshwaran6736 photographer name is aurelie curie

[@Twizzzzzy]

I remember back then in 2017, since then you blew up!

[@phaobi]

The mystery girl in the desktop picture is who am wondering...... just perfect picture, thanks a lot....!!!

[@livebythews]

Pretty sure you read my mind. So glad you're doing bug bounty vids

[@ohiomim1045]

Please continue these type of videoes...really find these helpful

[@vugargaragozlu6737]

Best explainer ive seen on youtube. Thanks

[@vaibhavsingh4108]

You are real life saver bro . Your videos are very helpful and very lucid .

[@SchoolforHackers]

Hey Hackersploit! Been following you for years and you are really rising to the top. Keep it up -

[@donaldmunengiwa8668]

Great video, Awesome information.. I was thinking of using my thursdays as bug bounty days but was lazy as in to farm and gather the tolls i was going to need :)

[@udaydatrak4438]

Good one. I have started 100+ security test cases training to be a best bug bounty hunter and to get easily :)

[@n-sta]

U can also use vulners for direct list of vulnerabilities and fingerprints on site.........

[@anik6848]

Can you give me download link

[@n-sta]

@@anik6848 its a chrome extension dude search "vulners chrome extension"

[@anik6848]

Thanks

[@OPFGBCUVBBCBCG]

Thanks for making this series hope to see methodology videos and much more later on future.

[@aadarshainfo3535]

हेर्नु भएकोमा धन्यवाद । Add in description, Nepali Thank you note coz we r Nepal's viewers

[@redz591]

Wonderful!.. please keep these videos up and coming! Each 1 Teach 1 🙏

[@dajuanm9028]

MacOS doesn't have a package manager per se, they use Xcode or the unofficial PM Homebrew.

[@SecretLetters]

anybody able to get Sublist3r to work in 2020? Seems to always get caught at Searching in VirusTotal.

[@waheedmurad4223]

Love you and your channel what an amazing guy you are keep it up

[@thejudeway5369]

This is how many times he said essentially 👇. Love the vid btw

[@Adarshs3]

देखने के लिए धन्यवाद -- Nice touch here!!

[@cybertamil_5835]

best channel for hackers and pentesters "the best"

[@shaan8833]

Don't most bug bounty programs have a rule against using automated tools to scan for vulnerabilities? especially noisy ones like dirbuster which could end up creating as much traffic as a DDOS attack?

[@Alexander007A]

When I see your video that I want I'm so happy 🥰🤩 love you sir ..

[@JSiuDev]

WoW, I have that wallpaper on my phone years ago!!!

[@roborbiettinoisgone392]

Can you send me?

[@JSiuDev]

@@roborbiettinoisgone392 It was years ago and I lost it. But luckily using a screen crop and google image search did find it. 3rd one in wallpaperaccess.com/city-night

[@Dzanjin]

I have this wallpaper on my desktop right now, which is where I'm viewing this video. When the video started I was confused with no sleep and coffee in hand haha Thought my browser was crashing XD Cool to see someone else mention something about this wallpaper!

[@JSiuDev]

@@Dzanjin try viewing with full screen🤣🤣🤣

[@Dzanjin]

John Siu I was! Haha it’s my windows desktop wallpaper, but I also run my kali box in a vm fullscreen with a different wallpaper. At first I thought somehow my computer was crashing and I was seeing both desktops at the same time lol Quickly realized after I noticed the side dock on his kali, that it wasn’t mine. I’m just exhausted and my brain wasn’t ready. I’m rolling the newer xfce desktop, so no side dock for me haha

[@parikshitsingh9847]

Big fan and huge respect from INDIA

[@neo.x794]

Oh bhai main bhi indian hoon

[@Splixy]

This is amazing, really hits the nail

[@sabrinaferkous5695]

i liked and subscribed to your channel before even starting the video as soon as i saw the word hacker, as a beginner ur channel is soo informative thank you, you are doing great keep going ❤

[@d1w9t8w6]

*Programmer

[@h4kster182]

Thaannk uuu bro for making this series it will be very useful ;*

[@jazilzaim]

Where did you get that nice wallpaper from?

[@robin3685]

Jazil Zaim yeah, its really nice

[@dualstab5952]

backgrounds4k.net/wp-content/uploads/2016/04/City-night-uhd-desktop.jpg Should be this one

[@alansmithee7549]

Thank you! This video is so helpful!

[@JASDKA1]

Can you tell a bit more about the whole bug bounty thing?

[@arifbasri4950]

Thank you for sharing... use them for good purposes

[@pythonandlinux]

I loved the wallpaper. And the video too.

[@Warlock1515]

I loved how you said there will be more tools on your forum post :P

[@MrROHIT358]

What is the configuration of your system ? Like the RAM , SSD , OS

[@mindofjavier7696]

That wallpaper is amazing

[@voteZDLR]

I was hoping he'd be going out in the wild with a mason jar and a smartphone or something trying to catch bugs like pokemon for a bounty. This is the next best thing though

[@desh-2405]

i have acer predator helios 300 and i want to install it alongside windows 10 (dual boot) because alfa wireless extenders are banned in my country . so does the wireless chipset that is inside the laptop do monitor mode and packet injection? so does qualcomm atheros qca61x4a do packet injection and monitor mode

[@donaldmunengiwa8668]

I have a similar setup where ive dual booted windows 10 and my kali and i've been able to successfully used tools like Fluxion which do monitor mode. VMs dont have direct access or something to the physical interface hence lacks the ability to put network interfaces in monitor mode or do similar stuff

[@desh-2405]

@@donaldmunengiwa8668 you have the same chip that i have ? . because some says it can do packet injection but can't do monitor mode

[@donaldmunengiwa8668]

Not qca61x4a

[@desh-2405]

@@donaldmunengiwa8668 and how should i know if it supports monitor mode and packet injection (because i still didn't do the dual boot) and how should i know if it support kali in a good way . and does it need drivers ?

[@masterblaster7129]

It's very much interesting tutorials I never have. If it is possible to explain web application architecture to analyse the facts and coming of attack.

[@md.rafiahamed4346]

Please add manual testing with automated one as automated testing is not supported by many clients...

[@hacklikeAgbaby]

Sorry I have been facing issues, burb not being able to work because I installed bee-box Virtual Machine , how do I fix this please 😢

[@parthadroja5047]

I use Maltego, Red-HawkV2, Knockpy, smartwhois, and builtwith.com.... I dont use any add-ons for footprinting....

[@Parveenkumar-rk7eu]

what os u use pc config modem setting which fone u use u use tor? vpn?

[@brainmassage4061]

Bro, thanks for this amazing video. My question is how to use PramMiner? How to brute force and find hidden parameters using it?

[@bossylion4737]

I also use nikto, uniscan, gobuster and jexboss for java web applications

[@bikideka7880]

hey . amazing video. keep making it helps a lot.Actually how long it can take to earn first bounty assuming I know nothing about hacking?

[@Tux0xFF]

it would take around forever

[@bikideka7880]

@@Tux0xFF opps

[@jometjomet7262]

Can I add Chinese subtitle translation? Can I add Chinese translation?

[@Patrick-fz8ee]

邱健文 no

[@jometjomet7262]

@@Patrick-fz8ee What can you do?

[@a7u412]

@@jometjomet7262 Hé didn't add Chinese subtitles so you can't

[@Crimbtw]

A7U gaming Maybe it someone speaks Chinese doesn't understand. They'll be able to watch this video and give the video more views

[@javokhirungarboev9164]

你可以看看在百度bug bounty tools 但是写在中文

[@BlokeBritish]

ive just started into this and im confused wat these tools r used for ?? ive only got Burp and sqlmap so far

[@nitinfudani1552]

Hello Sir I wanted to learn penetration testing. And on your channel lot of content is available to learn which really excites me to start but got confused. Could you please help me which playlist i should start with. Thanks in advance.

[@hokhyt]

Note: sublist3r is now available in apt repo. You can install it through apt install sublist3r.

[@officialauzaie4039]

Can it be done on termux?

[@harshitjain975]

sir a small error came when i use clone knock from github, after doing all cs and ls command . it shows ImportError: No module named python-dnspython pip install dnspython how to solve it please guide...

[@meghrajsinhchauhan]

greetings! actually i have a request to you that i cant use apt-get install (something). it says failed! i also tried to edit the /etc/apt/sources.list file and cleared everything from there and copied two links in the kali website there and tried to update using apt-get update. but after sometimes some connections are not made and its not updating. can you please help me out here!? PS:-I'm using vmware and followed your video to install it on vmware since i had to format my laptop.If something was missed there in the video plz let me know! Looking forward for a reply from you!

[@jdjdjdj2107]

Usually the reason for this issue is due to a failed/interrupted package update. If caused by dependencies: sudo apt-get clean sudo apt-get install -f sudo dpkg --configure -a sudo apt-get update If you get you recieved one of the following errors: Encountered a section with no Package: header Problem with MergeList… The package lists or status file could not be parsed or opened. Remove and rebuilt the package lists: sudo rm /var/lib/apt/lists/* -vf sudo apt-get update If you get the following error Could not get lock /var/cache/apt/archives/lock - open (11: Resource temporarily unavailable) The try the following sudo fuser -cuk /var/lib/dpkg/lock sudo rm -f /var/lib/dpkg/lock sudo fuser -cuk /var/cache/apt/archives/lock sudo rm -f /var/cache/apt/archives/lock If due to ‘Unmet dependencies for installed packages’, fix in the ‘Synaptic Package Manager.’: Open Synaptic Package Manager Click ‘Status’ (left side) Choose ‘Broken’ Remove the broken packages

[@jdjdjdj2107]

CURESE #3873 On discord. if you want some help

[@meghrajsinhchauhan]

@@jdjdjdj2107 hey man thanx you replied to my question... but reading it i was kind of lost and didnt get you a 100% can you just edit the reply and write numbers so can know what to write and run first and i could get flow

[@Wereld03]

meghrajsinh chauhan send the full error or add him on discord

[@dxlultra1020]

or you can just fucking paste your error message into google, and go from there..everybody is not going to hold your hand

[@anupamjaiswal7714]

Why do we require wordlist for subdomain enumeration? Can someone explain it? Thanks in advance:)

[@pr0j3ct97]

damn but this is old, now we got subfinder & amass for subdomain discovery, nuclei for scanning, ffuf for dir brute forcing

[@devdarpan3582]

Did you really mean chrome browser or firefox i think you want to say firefox?

[@donaldmunengiwa8668]

Most probably meant Chrome. As a bug bounty hunter you'll probably working with webapps and chrome is sort of developer oriented and has developer options which are really helpful

[@RAGHAVENDRASINGH17]

Firefox is best for this

[@darththuban00]

@@donaldmunengiwa8668 I am a web developer, Firefox is way better in this topic, no contest here. In fact there is a Developer Edition of Firefox that works pretty well.

[@ashutoshrohilla]

Hey, so i tried using knock but i am unable to run it using python3 and pip for python2 is not able to install what should i do now

[@zevenbite4553]

Traceback (most recent call last): File "striker.py", line 14, in from urllib.parse import urlparse ImportError: No module named parse I already did everything, but this error is not fixed, help

[@devcreed8175]

For all those who are here to get information about how to get started, here are few videos which might help you out: kzbin.info/www/bejne/baquhmOZiK2oa6M kzbin.info/www/bejne/p57IZaV3eZegoq8 kzbin.info/www/bejne/eYacepScmJJ8ndU kzbin.info/www/bejne/rIG6o6WNoculjrM kzbin.info/www/bejne/oZ-Tm3aijLiXepo An unhelpful suggestion from me: The methodology I follow is, master a technology and then exploit it. Without mastering (or at least understanding) a technology, you can't start finding bugs in it. There are a tons of things going on behind the website you open or this video you are watching like a server hardware residing in a data center somewhere in this world with a hypervisor installed on it and a VM instance with a web hosting application, hosting this website behind a loadbalancer which is behind a dedicated physical firewall which might be behind some proxy server which might be behind another firewall. This was only the hardware part, many such things are deployed on the software-side too! So, start it with focus of learning it and then master it and then -_- Sit back home and read this comment again! Goodluck for your journey!

[@bobuxproductions8463]

FINALLY an indian who can speak Propper english

[@HackerSploit]

I am not Indian, I am Kenyan.

[@eliadams9984]

Can you tell me what computer you use/ what’s the best bug bounty hunter computer is??

[@simonlewis3188]

try Purism or Razer...usually the gaming computers are great for hacking because they can handle so much shit.. I personally use Purism because when you buy it, you chan choose the battery, the storage, the firmware and more

[@masterblaster7129]

It's there any possible way to write own scripts in kali machine.

[@MLMGalarza]

Hello Hacksploit. Can all these tools be used for Pentesting? Is there a big difference between Bug hunting and Pentesting? Thanks!

[@HackerSploit]

Yes, absolutely

[@JoshuaPhilipJha]

1:55 I love Kali Linux

[@abuajmalmajidponnethabu2858]

where u find wallpapers for your desktop?

[@regular89]

backgound photo, Amazing

[@yashgupta9718]

Please upload this series faster wait from while

[@c3vids_shorts]

Bro, great channel love your contents. Can I know is it still worth it to do bug bounty now(2020)?

[@ThinCar]

You ddnt understood the concept depthly, u can do bug hunting anytime,and its not going anywhere in anytime untill n unless AI takes it over.

[@arshiyakhan6789]

Please upload this series faster

[@petejacob6040]

where did you get that wall paper???

[@HK-sw3vi]

Do we have a discord for this channel??

[@sajidalam1989]

From where to start as a beginner?

[@ludovicopini5003]

i hope u'r going to 100Bilion of subscriber, i want will be here when this happen

[@Free.Education786]

Please make installation n usage videos 📹 on ... 1. Jok3r automated web penetration framework. 2. Vajra automated web penetration framework. Using Kali parrotsec Linux distributions. Thanks 🤝💯👍❤💚💙💜🥰😘✌

[@wintorez6649]

Please Enable Caption

[@markbriones8567]

It has caption bro

[@AmeerHamza-cy6km]

Enable auto caption

[@userou-ig1ze]

6:30 cherry keyboards... the hate of my life

[@omer.localhost]

Striker is beast 👌

[@VasanthKumar-bf9je]

Any reason bro

[@BinkaOG]

a link to that desktop background would be nice too haha

[@anilreddy5918]

Can you make a video for latest tools and xss

[@yassinelio5881]

where you get that wallpaper ? thanks

[@dankifyy]

Is parrot security OS safe enough to use as my every day driver

[@donaldmunengiwa8668]

Yes it quite is.... I use it as my daily driver and i also work closely with the development team so i can definitely vouch for the security of the OS

[@shaneellington7991]

I second it, its my daily as well. I used to run it just as a bootable, until I later decided to run it on a partition.

[@richard3422]

It is safe, but be cautious of what you install. Older versions of MongoDB left a port wide open and didn't require authentication by default. That's just an example. Be cautious of what you install and the settings.

[@mohammedashraf250]

Unable to open the links provided below

[@AJITHKUMAR-eb8nl]

How will u get this wallpaper please send website name

[@Technologyc]

raspberry pi 3b+ donot work when a network card is connected can you help me on this ?

[@donaldmunengiwa8668]

external network card?

[@Technologyc]

@@donaldmunengiwa8668i mean network adapter

[@emad_arganex]

باتشكر از مشاهده شما Persian

[@nirmalvishal2013]

Excellent voice.

[@jasoe_playz1926]

I am using Kali Linux virtual box on my Windows 10 pro.. Is that okay?

[@trinity2725]

Literraly all the hackers do that,

[@thoriqudine3859]

What is bug hunter for pc?

[@psgmylove7474]

Thanks you for the video

[@Razorcr3st]

Love you HackerSploit. You should think about opening a School it join H1 or Bugcrowd and help people learn how to get 'reps' and private imitative invites so those who can and have the skills can try to work full time. You should also think about joining 'CodeMentor' if you wanted to try interactive teachings or just interactive code reviews.

[@dxlultra1020]

"so those who can and have the skills can try to work full time", if those people had the skills then they wouldn't need to get help from KZbin, they would already know sufficient information to accomplish that

[@Razorcr3st]

@@dxlultra1020 yup in hindsight that was a pretty dumb ststemement on my part. Was just excited as usual to watch another HackerSploit flick :)

[@MrGFYne1337357]

i'm late, you rock hsploit

[@dinabro5739]

Nice Video , Thank 4u