APPROACHING AN E-COMMERCE TARGET!

[@vikaransecurity9158]

This was one of the most informative videos on bug bounties that I have seen, please upload more content like this

[@johnsnow1062]

Best Wishes for the future farah. Good presentation . Hoping to watch more quality vids in the future.

[@historichacker2013]

i generally dont comment but i have to say your videos very well explained ! awesome keep up the good work

[@simranpreetsingh5502]

Amazing content , looking forward to learning more of it ! :)

[@carlosmonterrosa4617]

Very Good video. Really appreciate your willingness to share. Keep it up!

[@afifmalghani755]

Both your videos are extremely beginner friendly. It's very difficult to find such content. Thank you for this. Would love to see more.

[@0xsunil]

Much appreciated the effort in editing! Eagerly waiting for part 2!

[@therollingambit5222]

Loving the concept behind your videos. Please keep uploading haha. Cheers frm singapore!

[@technicalilm8999]

What makes this video different from others is that you use more recent real world examples. Very informative.

[@TheWrkCo]

Very informative and easy to understand... Looking forward to more of these videos.. Keep up the good work and Thank You for these tips..

[@umessr8456]

It's clear that your are putting in alot of work in this video's. Keep up 👍

[@kamar1380]

Thnks for this awesome video. I can't wait for your next video....👍

[@Hharshit01]

Thanks. It's so easy to understand

[@M10GAMING-j8y]

I have checked all of your videos and all are best thankyou

[@M10GAMING-j8y]

hey can u make a video on tomnomnom tools and also on @1ndian133t gf-pattern tool please

[@johnhammond2813]

Thank you. The video was so informative and your way of explanation is too good, please do part2 on ecommerce testing and also keep posting these kind of videos. And also if possible explain how to start with hackerone or bugcrowd bounty programs with the process which will be helpful for beginners.

[@utkarshagrawal6060]

Very informative. Good work.

[@TheOriginalAryan]

A very well articulated video covering the basics and theory. would love more videos covering each point in greater detail. Also, if you can share your background and how you got into bug bounty/infosec other than what you have already covered in your first video, it would inspire other people. Keep up this excellent initiative

[@ishanshojha]

The tip about changing currency also applies on value of money . Paypal doesn't check that too.

[@AlphaCybersecurity]

Very informative. Well Done! Thank You

[@hacxpro6206]

Amazing video. Lots of love. Hoping to see more good contents like this.

[@cjhackerz]

Awesome video, something like series on owasp top 10 vulnerabilities will help lots of new people in infosec.

[@FarahHawa]

Great idea!

[@RX_100.0]

awsome content, waiting for part-2 mam

[@yukeshkumar9536]

Love this video and you !

[@inderjeetsingh1340]

Plss make second part... and make similar videos on how you attack today's sites

[@malwarecopter4440]

Nice farah try uploading basic tutorials on bug hunting like finding the idor's in wild, basic xss and so on 👍👍👍

[@FarahHawa]

Thank you! There are TONS of videos and blogs on those topics. You might want to check out Nahamsec or Stok's channel, you'll find a lot of those.

[@BasedCrusades]

@@FarahHawa STOK is fantastic! May I also recommend Hackersploit as well? I play at least one to two videos of HSploit a day during my one hour drive to work.

[@itsactuallyaditya]

great video so much informative , Are you from India?

[@harshalchaudhari7301]

Amazing as last one! Please do the part-II

[@akshanshshriwatri8060]

Content 💯 . Thankyou soo much for this 💕

[@ruheenaqureshi5339]

Keep going amazing videos, 👍

[@hiteshpant9868]

🙏Please tell a practical roadmap for beginners in next video with resources... Thank you. 😊

[@slbpriank91]

Good video! Keep up the good work!

[@himanshushah9471]

Please make video on beginner guide to Cybersecurity/ethical hacking how to start career In cybersecurity like books, courses,programming languages,Top Certification, all stuff, etc. Specially for students/fresh Graduate in CS and IT

[@margaritahernandez435]

Or like me who will love to learn it

[@markgacoka9704]

Heyyy, I don't think CardiB has a balance of $0 lol. (3:45) I like your videos btw. Really well explained!

[@sumitkumarsingh35]

Farah do make a video on how to get started with cybersecurity career . From learning to getting a job. Atleast how to start learning. I am so much confused. Help me !

[@masti2point0]

Thanku mam for helping me in such a manner😇😊

[@Manojkumar__]

Why u not continue this type of videos

[@mjant3069]

im your #1 Fan 😊

[@saibaba7649]

Thank you so much sister pls keep making more such videos :D

[@rahulprajapat1460]

very much good. but code lines are not visible very clear.. .🔥🔥🔥

[@adeshranjan8067]

You video was very informative as expected from the first one... Pls make part 2 of this video... ❤️❤️

[@akshaydeodare6149]

This just upped my energy🦾! thanks

[@yougaincomputers1080]

Great content, are you using free version of burpsuite?

[@KrakoonGaming]

for bug bounty what os you are using right now? is it kali linux? you use kali as primary os or on vm and last question what you recommend for using kali as primary os or on vm

[@smitsawant7063]

Mam just a small request to you! Like in this video u intercepted the request with burpsuite for price validation bug, please in your next videos do include such hands on .. and also with other tools. Keep posting such bug bounty videos..

[@ashishf6]

If there is a full checklist for the same. Please share.

[@allandiego1446]

I think so haven't to that vulnerability is better u send id product and with php you send request to paypal.

[@Status_Zones.]

I became a world famous fan.......for this content.

[@saudia646]

Need second part, love u sis...

[@hackerspider1]

Congo on 2k subscriber with two videos.

[@FarahHawa]

Thank you so much!

[@KrakoonGaming]

i sub to your channel and also liked the video. your content is very nice

[@jonnydeep3342]

plz make video on your bug hunter's journey

[@vamsikolati]

Nice work keep doing it please

[@gokulap2251]

We need a video series on this topic

[@deeshantdhakate3958]

It's legal to change the currency manipulation??

[@CristiVladZ]

good job! What do you have on graphql?

[@zeuscybersec659]

My brother Cristi is in love🤣

[@trishnoor3763]

Hey very informative video..... and at what age did you started hacking and how much time it took you till you first bug bounty??

[@s.h.i.e.l.d5893]

What about path traversal attack? it's pretty 1337 attack . nice video though.

[@0xx039]

#justatip try creating video's with slides like @katie does in her youtube channel by doing like that you won't miss anything you wanna say and it would be also good instead you filling the screen we can see info's on screen and maybe your cam on bottom left corner. And this is gud too nice work :)

[@vrushabhdoshi5664]

Please make detail video on IDOR.. with example of your PoCs.

[@nightwatch4705]

That was a very informative video. How did you learn all this? Or where did you start? And any idea where to dig deeper for such information. Waiting for part 2.🤟

[@FarahHawa]

I have another video on where I learnt this and how I started!

[@nightwatch4705]

@@FarahHawa I saw that as well. Great video. But I should have clarified that I wanted to how you learnt about these test cases of attacking an e-commerce website. Is it there in the books and resources you mentioned?

[@FarahHawa]

night watch I read white papers and reports on hackerone

[@nightwatch4705]

@@FarahHawa please keep up your good work. Will watch out for more videos from you. Thank you.

[@robertfling6173]

Great job!

[@the_uwd]

Please tell the accessaries and device need for a beginner 👍

[@arbabshehzad6443]

I Don't know how but I think I can learn better with you, I've been doing so many paid courses and no one teaches or tells to openly. I Hope this comment will be valuable for you.

[@sreyanshmahapatra8730]

Can you make some more examples on IDOR (paid access thing ) and even on advance xss .

[@Spiderman432]

really love your work ❤

[@savirsuda]

Please make a second part

[@faysalahmed7251]

What about practical example?

[@emmanuelafolabi6847]

Thanks for the amazing content, I have always being curious about how race condition is exploited. What tool(s) have you used to successfully exploit race condition?

[@FarahHawa]

Burp turbo intruder should work!

[@emmanuelafolabi6847]

@@FarahHawa Okay thanks

[@vishalmishra1937]

what was ur first bug bounty amt and for which org?

[@azeemahmedkalesha6459]

Hi Farah, can you please let me know the hardware specs required to get started into bug bounty?

[@FarahHawa]

Nothing fancy, just need a laptop, burp suite and a good internet connection. Any laptop will do but if you want do some heavy stuff and use a lot of VMs then I'd suggest Macbook Pro

[@azeemahmedkalesha6459]

@@FarahHawa somewhere in a decent budget range, any specific suggestion? Example the cpu or GPU capabilities... As we will also have to do some extensive brute forcing, it may require some good computational power, that's the sole reason for the question.. I'm looking to buy a laptop anytime soon, so need some suggestions from professionals like you, in a decent budget range.

[@FarahHawa]

@@azeemahmedkalesha6459 I don't use brute forcing too much but my HP Pavilion has decent computational power so maybe try that. Also, I'm a beginner too so right now even I'm saving up to buy a better laptop bcz honestly Macbook is the best for the kind of heavy stuff required.

[@azeemahmedkalesha6459]

@@FarahHawa Jazakallahu Khair ✌️

[@boneytech3965]

Helpfull video thanks

[@cyrexplays5031]

2nd part baby😍😍

[@AkashVaani786]

I've used that thumbnail, it's from Canva😁🤘🏼

[@000t9]

Dear Farah Hawa! Can you take a video about how to test websites without no input? I am searching how to do that... :)

[@kartikaymusic.]

OK, I have been learning from past 2 months actually 6 months but 4 wasted cuz of studies( man i wanna leave this country) I have read dozens of articles, done everything, please tell me how do you approach a site, make a video in which it shows how to approach a site, that would be of great help, thanks !

[@FarahHawa]

There’s no single way to approach a site, it depends on too many factors. For an e-commerce site- you can use these methods to approach. But for eg. approaching a mail service app or banking app would be very different

[@malikimranawan3762]

hey great am also a bug bounty hunter .. try to make video on RCE and SSRF

[@shreyabanerjee1684]

Hey Farah can u please tell me that is it legal to find bugs on any random website?and if so then how..like should we have to take permission for attacks from the admin of the website?

[@FarahHawa]

It is illegal if the website doesn’t have a bug bounty policy. You should hunt on programs which have bug bounty/responsible disclosure programs

[@shreyabanerjee1684]

@@FarahHawa will you please make a video on how to intercept website in burpsuite legally which will not cause any problem . And how can we use burpsuite for finding bugs in bugcrowd !

[@FarahHawa]

Shreya Banerjee using burp suite is legal! You just can’t attack websites that haven’t allowed you to. There’s a link in the description of this video which will show you how to use burpsuite!

[@quotesmotivation1384]

Mam please add subtitles if possible ,... Plz

[@surajagarwal3561]

Plz upload tutorials from very scratch in other series for idiots like me .... Who are totally new in this field plz plz

[@mubinamn]

You rock FARAH

[@FarahHawa]

[@usernotfound6729]

This will not work in major websited

[@tejaswagh5743]

hi, what os are used to find bugs with tool you are perfer...

[@jarviselite2542]

Thanks for this video

[@adarshs2388]

Nice video...👌👌

[@BAPSOFFICIAL]

why you are not reply in twitter?

[@MrWalxiLegendx]

really cool vid :)

[@bhaweshsharma4894]

I want to be a part

[@satyamsaptal9305]

Great content ☺️

[@factofficial4399]

plz make a video on burpsuite😊

[@alifaizan8458]

Is it idos???

[@Chiragsanikam.]

Was waiting for this one!

[@ashutoshsoni2359]

Please tell me how can I participate in a program after going in the directory in hackerone . Please help me with that.

[@shreyashhire7527]

Do you hack on hackerone ? Nice video 😄

[@FarahHawa]

Nope

[@dorianvoka5591]

Helpful indeed

[@user-yh9zp]

What is u r age and what age u start hacking ?

[@JasonGomes140294]

is price manipulation and parameter tampering the same ????. Coz i tried it once on one of the e-commerce websites. just for starters (Pun intended) i ordered for a macaroon by entering the lowest amount i could think of. after 20 minutes their customer support later calls up saying that the shop has been closed down and cut the call. LOL .. All in all it was fun 🤣🤣🤣🤣🤣🤣🤣 Also guys dont try this without legal permission from the target. (I know i was stupid enough to this without permission)

[@vishnuchandra5042]

show live demo in websites or any virtual machines

[@noormohammadgagguturi]

Thanks a Lot

[@sheelachowdary3126]

Please do live hunting

[@civilengineer493]

hotel booking is not clear