How To Get Started In Bug Bounties

Got a question? Drop it in the comments below!
😍 Become a KZbin member - / @dccybersec
🙏 Become a Patron - / dccybersec
👕 Merch - teespring.com/stores/dc-cybersec
❤️ Twitch - / muffin_knight
📷 Instagram - / dccybersec
📖 Facebook - / dccybersec
🐦 Twitter - / dccybersec
💬 Discord - / discord
👍 Thanks for watching and I'll see you in the next one!
🚨Hit subscribe to stay up to date with the latest news in Cyber Security🚨
MUSIC:
Music by / ikson
/ mabfeaetddup
~~~~~~
SIGN UP ON TryHackMe!
tryhackme.com/...

[@domaincontroller]

02:13 HTTP, TCP/IP, Linux, Bash scripting 02:30 Web apps, Networking, HTML, PHP 02:50 Burp Suite, Google 05:08 owasp

[@mr.shanegao]

thx

[@xd_preet]

Father of cj

[@atmane001]

Super useful resourxrs; 1.Twitter, gold mine for bug bounty. Hust follow the main players. 2.Start reading bug bounty reports, as many as you can and test. 3.Readn read ... many free resources out there. Big G is your friend in this case. 4.YT of course, follow channels that talk about bug bounty, cybersec and even dev. 5.Do some coding projects (c, c++, javasxript, python). It will be useful. Check github for ideas. 6.Have fun 😁😁

[@no1sploit529]

Your video motivated me, I consider all of your words. This is heart touching. Thanks for such a great information.

[@dccybersec]

Thanks for the nice words and for watching :)

[@no1sploit529]

@@dccybersec welcome sir. Keep helping us 💓

[@shadowbandit5689]

Thanks for the information mate. Very helpful me and mates currently studying Cyber Security and are looking into diving into some bug bountys.

[@tirtheshpawar9614]

JUST THE PRACTICAL GUIDANCE NEEDED IN AN ERA OF FLOODING INFORMATION... KEEP DOING THE GOOD WORK DC CYBERSEC!!!!

[@dccybersec]

thanks man!

[@devcreed8175]

For all those who are here to get information about how to get started, here are few videos which might help you out: kzbin.info/www/bejne/baquhmOZiK2oa6M kzbin.info/www/bejne/p57IZaV3eZegoq8 kzbin.info/www/bejne/eYacepScmJJ8ndU kzbin.info/www/bejne/rIG6o6WNoculjrM kzbin.info/www/bejne/oZ-Tm3aijLiXepo An unhelpful suggestion from me: The methodology I follow is, master a technology and then exploit it. Without mastering (or at least understanding) a technology, you can't start finding bugs in it. There are a tons of things going on behind the website you open or this video you are watching like a server hardware residing in a data center somewhere in this world with a hypervisor installed on it and a VM instance with a web hosting application, hosting this website behind a loadbalancer which is behind a dedicated physical firewall which might be behind some proxy server which might be behind another firewall. This was only the hardware part, many such things are deployed on the software-side too! So, start it with focus of learning it and then master it and then -_- Sit back home and read this comment again! Goodluck for your journey!

[@DamienBiffinc0ldm3th0d]

THANK YOU, i cannot say this enough THANK YOU, i needed a definite go here learn this start there.

[@dccybersec]

😊😊

[@hakunamatras]

Great video! I'm a student in Internet of Things with interests in cybersecurity and pen testing also, due to my study i don't have a lot of time to search the perfect resource on where to start, i usually get home, make my homework and at around 1am i can start learning. thanks for helping me out on that haha Could you make this a serie maybe? How to get started. How I did my first bounty Where are the keypoints the check How to write a good report Things not to do while bug hunting Roadmap to pen testing Again, Great channel, keep it up ^^ Greetz from Belgium!

[@dccybersec]

You literally named almost every episode of the bug bounty series that i've got in the works hahaha. Thanks for watching man, really appreciate it!

[@hakunamatras]

@@dccybersec Don't thank me, you're doing the work! i'd love to help you with finding sources or just philosophize about bug hunting, any way i can reach out to you?

[@dccybersec]

@@hakunamatras Discord or Twitter (links in description). Probably discord is best, i'm pretty active in my server :)

[@psychoticgamer6853]

Bali mask is background 😱 This boi can Rob a bank🔥

[@jonathanyturralde]

This was a great video. Thanks for the content. Awesome stuff and very helpful for a newbie like myself.

[@dccybersec]

Glad it helped out :)

[@fourofour9569]

Good stuff! It really got my interest in bug bounties.

[@RN-kl4kp]

Yes..! Thank you very much... for this... just a request when you find get a bug bounty 💵💵💵 which we hope soon ? Can you please share with us?? The process??

[@dccybersec]

Yep will do mate. I’ll be documenting my whole process from beginning to bounty!

[@harihacke9454]

@@dccybersec where mate

[@wtfdoiputhere]

Im gonna start with this bcz it seems easier to me than some magic assembly voodoo shit and i have great knowledge in linux, js and networking so im ready

[@mahir_saif]

This video was so damn intense. Thanks a lot.

[@Mauricio_Ferrari]

Stok has been great to watch, already watched some of his videos. Great video by the way and thanks for recommendations.

[@dccybersec]

he's an absolute legend. thanks for watching!

[@vishnudileesh1243]

Looking forward to the future video in which u tell your first bug finding story

[@dccybersec]

I can’t wait!

[@Plutosantorini]

Bro dont forget about cyber mentor man that guy is a hero

[@dccybersec]

For sure! He’s awesome 😎

[@youarenotspecial17]

nice video. btw I subscribe your channel cause you look like a really nice and honest guy!

[@dccybersec]

lol thanks :D

[@JK-pb3vj]

Loving the content mate - great advice! Cheers from BNE, Aus 🍻

[@dccybersec]

Thanks mate! I should do a local Brisbane meetup sometime

[@JK-pb3vj]

Keen as, let’s put something together.. Where you at @codingo_ !

[@Jawdey]

Hey how good is brisbane!

[@prafullsingh4150]

Your all videos are really awesome. I like every video. Post video more . thank you bro. 😊

[@dccybersec]

Thanks mate! That’s very kind of you

[@prafullsingh4150]

Your kindness. 🤗😊

[@faruky9197]

First of all English is not my native language. I really want to do bug bounty but not too many resources in my language in bug bounty. Because of this, I cannot learn by reading documents or watching videos. That's why I need to learn software languages so that I can understand its logic. What should I do?

[@ThushyCyber]

Thanks 😊

[@dccybersec]

No problem 😊

[@ocelotrevolver4125]

Can I make a living from doing bug bounties, or perhaps doing security evaluations for businesses demonstrating network security flaws to business owners and how to secure their systems and how to harden them. I have a good understanding of cybersecurity with years of experience using Linux I'm just not sure how I can transfer these skills I've learned over the years and turn this into a freelance income, any advice?

[@maxitaxi7340]

I dont understand something. Some hackers are reading the code and they see instantly where a voulnabilty could be. But if i try to read webside code i dont understand anything. So i always go through the webside,and im testing every parameter. But how can i learn to find bugs by reading code?

[@skiddy5294]

I think that comes down to experience.. I could be absolutely wrong because I'm just beginning as well. I think over time, you learn what will/wont work in that language.

[@kaotechtalk2395]

This video was great! Thankyou so much for all of the info! Got a sub from me

[@dccybersec]

Thanks for the sub!

[@aritra1414]

Definitely helpful. Thanks man!

[@darkhack3r417]

New subscriber here also this is the first video i watch in your channel xD

[@dccybersec]

woohoo! welcome! thanks for watching :)

[@alexramsey1006]

Very nice presentation... Thank you.

[@dccybersec]

Glad you liked it!

[@frostyboi6989]

Is doing a bug bounty like doing a pen test you break into the company and tell them the bug ?

[@dccybersec]

More or less, yes

[@realcarttons2177]

please do clear my confusion ,do we need to stay ananmous during bug bounyt

[@yashwanthd1998]

What i dont understand is people always talk about xss injection.. if the website itself doesn't take any user input or input is sanitised which is everywhere these days..xss injection seems very weak and impossible.could u explain

[@francis2k488]

Thanks for this video. I am still learning and believe it will all sync soon. I got the OWASP Testing Guide V4

[@hackedemy9324]

Are you Nigerian? Goodluck on your journey brother!

[@francis2k488]

@@hackedemy9324 yeah but live in Australia. Are you? Where do you live?

[@hackedemy9324]

@@francis2k488 You're really lucky! I'm in Nigeria at the moment but hopefully, I'll move out soon.

[@francis2k488]

@@hackedemy9324 are you a hacker? Why did you say I am lucky. With skills we can be lucky anywhere bro. You can try migration pathway.

[@hackedemy9324]

@@francis2k488 Yes I am. I'm self-studying cybersec online and studying Computer Engineering in the uni. Planning to leave Nigeria and study Computer Science or Cybersec elsewhere bc this isn't helping me. I'll try the migration pathway, saving towards it currently.

[@abhichauhan350]

I want to learn bug bounty So tell me what topic should I learn

[@MyNameIsTX]

Soo essentially when you are going to attempt a bug bounty ( I am a completely clueless btw I have tried it and I don't know anything) do you just have to try every single exploit or like try all the possible problems? I do not exactly understand how it works. Also, I have no programming knowledge I have tried to self teach myself it and I am currently in college (community college) and hoping to transfer out to study IT but I want to branch out into cybersecurity. Basically, I do not know how to say what I want to say but, I think it is the owasp top 10 or something like that, do we try to find all those vulnerabilities in the program or website or is it something more specific.

[@36cowboysintotalatramranch]

Yeah, basically you can try everything possible. Each app is a new challenge, with different bugs and defenses to evade, and then you report on what worked and on what didn’t. The job of a pentester is to evaluate the client’s systems, so it’s also good to tell them where you weren’t able to get anywhere because they did things right!

[@malikimranawan3762]

if a Subdomain give us error 404 .. can that Takeover ?

[@manojbajgain7660]

Really loved your videos #Can you discuss about Class 0 sms

[@dccybersec]

It’s in the list man, you don’t need to keep asking lol

[@manojbajgain7660]

@@dccybersec you didn't response so I keep on making query😝😝

[@kylewattssurfing3266]

Thank you thank you thank you!

[@dccybersec]

You’re welcome :)

[@usama_sadiq]

Mera ye sawaal hai ke agar hum kise company ke ek se ziada bug dhoond lein tu hum us company ko saare bugs ke liye sirf ek report likhen ya har bug ke liye alag alag report likhen

[@dccybersec]

I tried translating this from Hindi and still couldn't really understand, sorry :( Can you reply in english please so I can help out?

[@rooney.46]

Love ya, keep going ❤️

[@dccybersec]

Thanks mate. Will do!

[@inspirationeveryday1175]

Hello Sir Do you recomended KALI LINUX for BugBounty or Windows and MacOs is Good ? THANK you ⭐🔥

[@dccybersec]

Honestly, whatever works for you. Kali might be easier as it has all the tools built in already but honestly, you can use any machine

[@kylewattssurfing3266]

Awesome thank you

[@dccybersec]

thanks for watching mate!

[@hugoalexandregoncalvespica124]

7:26 💪

[@abiworldseccentric9878]

Some times in The Hacker one site bug bounty section whom want to find the bugs they ask me to do find the bugs but they have one demand that shouldn't use Burpsuite and such a readymade tools so how can I performe..? Please can you suggest me

[@yousefkammouneh6559]

Just found my first bug

[@dccybersec]

Woohoo!

[@alonsocorrea1256]

Having the OSCP helps to get into bug bounty??

[@dccybersec]

for sure, but not necessarily needed

[@dougthebugwrx]

@@dccybersec having done 35 oscp lab boxes so far , i say no . oscp web app labs are very average . you will learn more from portswigger web academy. also use owasp zap , its free

[@jhadeeksollesta497]

Broo thank you so so much im only 12 and im only 12 and i dont know really if I can do this but thxxx

[@taylors4733]

The earlier the better!🙃 Go for it.

[@davidg9469]

Did you find many bugs ?

[@misterbrompton2400]

You didn't link OWASP

[@danielsuarezmartinez1967]

how much time pass from 0 knowledge to your first bug??

[@dccybersec]

I'll let you know when I get my first bug haha

[@gurjeetdasari1997]

Please reply with the name of guides u prefer us to follow as I could not get what u said in the video

[@dccybersec]

They are linked in the description

[@sammygun84]

Where all links from video?where link on guide?

[@dccybersec]

KZbin removed all my video descriptions a while back and replaced it with the default

[@tmlvnn]

🔥 Awsome 👑

[@dccybersec]

Thanks mate!

[@LotsOVideosMan]

What is song called at 0:32?

[@wackyskullgaming6711]

This is very informative

[@dccybersec]

Thanks mate

[@koushikram4036]

please answer this do I need burb suite pro for my first bug ???

[@dccybersec]

Nope. You can use the free one

[@koushikram4036]

@@dccybersec thanks for your replay

[@rastinghasemi634]

Tanx

[@sunilrai5506]

I am going to start bug bounty in hacker1 or bug crowd should I take permission or how to get permission from a web application, please help me anyone who all did bug bounty someone told me we have to take permission to bug hunting otherwise without permission it's will be a cybercrime plz someone explain😢😢😢😢

[@dccybersec]

As long as you stay within the scope of what is defined by hacker1 or bugcrowd, then you're relatively safe. Just make sure you understand what the scope is and how to stay inline with that

[@sunilrai5506]

@@dccybersec by the way thanks for your diamond advice sir (this advice is like a diamond for me can I follow you on tweeter sir)

[@sunilrai5506]

one more last like go to the hacker1 sing up and according their rule pick a program start bug hunting if they told us not to in any subdomain then not to do in any subdomain am I right?

[@imuser007]

U missed nullbyte channel

[@QuranicMoments]

Lot of thanks sir. 🔥🔥 سبحان اللّه 🔥🔥

[@dccybersec]

My pleasure. Thanks for watching!

[@kylewattssurfing3266]

Awesome cool...

[@dccybersec]

Thanks ✌️

[@ShashiSingh-ck7mu]

How many money can we make by bug bounty hacking.

[@dccybersec]

It depends which bugs you find for which company

[@ShashiSingh-ck7mu]

@@dccybersec like I'm 17 years old and going to graduate from school and I know c++ and python will that help? And as you mentioned in your video about tutorials on KZbin will that help me or courses on udemy or courses on hacker one will help I'm little confused which course to take can you please help me out because I also want to become a hacker like Santiago Lopez and Thomas Thank you.

[@b3ast407]

@@ShashiSingh-ck7mu Yes read hackerone hacktivity,medium blogs, do labs like owaspbwa it definitely helps, @nahamsec's KZbin channel is also very nice

[@tirilmariepedersen6956]

Who are you looking at? :p

[@harreve3629]

Love bro..

[@dccybersec]

love you too mate!

[@jinxscript]

it's interesting 🤔

[@dccybersec]

Thanks man!

[@jasoe_playz1926]

Programming Language is important.

[@epic5855]

EPIC

[@SecurityTalent]

great

[@dccybersec]

thanks!

[@nikkucreations7842]

Hii dc iam from india your video is more motivational

[@saddamhussain189]

Hi

[@lagimmediafiles6478]

Whats up Man?

[@dccybersec]

nm mate, how's it going?

[@lagimmediafiles6478]

@@dccybersec im good i will start on My IT Job your channel is a big help

[@rithvikgujjula1400]

LEt's go first one here and first comment again

[@dccybersec]

Killin it mate

[@kunal9999100]

Can I get one of your soft toys?

[@dccybersec]

Sure. Which one do you want

[@TheFunnyPOPS]

I won’t recommend it bug bounties has too much competition now all the pros find bugs before you.

[@dccybersec]

They just take the quick and easy payouts first. As far as building experience though it’s pretty good!

[@richardjohnson9765]

Watch hackersploit

[@dccybersec]

Definitely! he's awesome

[@mr.shanegao]

02:13 HTTP, TCP/IP, Linux, Bash scripting 02:30 Web apps, Networking, HTML, PHP 02:50 Burp Suite, Google 05:08 owasp