Finding Your First Bug

[@AlecMaly]

Truth. Even if you're in heavy study mode, just allocate a few hours a week to hunt with the goal of building out your tooling, even if you find nothing your methodology will be improving and you'll for sure get a hit someday if you don't give up. Some of these bugs aren't even complex, they just chain basic bugs together for big impact. People are probably more capable than they think.

[@tntxqx8281]

Thank you

[@h3rm3x88]

Thank for the words.

[@davikad-quirkies]

Yup

[@alechernandez5506]

What a lame name

[@learn-with-noob-007]

I reported a oracle EBS exploit and get the complete shell access to inside. Reported it. Just because your motivation ❤

[@NahamSec]

💪🏼💪🏼💪🏼💪🏼💪🏼

[@AronSzilagyi-wf9yq]

Hey I need some help with some social media stuff. Trying to figure out who’s behind some fake accounts that’s been bugging my family and business. Where do I look ? Thanks

[@learn-with-noob-007]

@@NahamSec ❤️❤️🤟🏻

[@hyperFOCUS42]

@@AronSzilagyi-wf9yq, try searching for anti-cybercrime social businesses (Germany has at least one).

[@jacobmain7814]

You compared it to learning a game and idk why, maybe because every other person makes it all seem so technical, but I started connecting my learning to gaming and have actually improved my process of trying to find bugs in websites significantly. Thank you for the motivating video!

[@jmcsmtp]

I cannot thank you enough. Truly the best advice I could have received at this stage in my progression. Your advice almost gave me permission to stop the cycle and just start really putting into practice all that I have learned.

[@gettingComputey]

Thank you for the encouragement on this. I'm exactly at this stage. Lots of learning, but just started trying for bounties a couple of weeks ago. Reported something that turned out to be n/a, but was worth the practice at making a report. Some people have been posting about how most make less than minimum wage on bug bounty when you do the hour math, so it's nice to see your name on the top 5 on Bugcrowd + these vids and know it's not unlike how it works with DJing. Thousands try at being dope ass DJs, but only a few will do the work instead of depending entirely on automation.

[@SleeplessDemon1]

Far Better content than the most of the content creators in infosec community!!!!!! ThankYou Ben❤

[@NahamSec]

Thanks for watching!

[@askholia]

The tools are like a scalpel to a surgeon. It's not the tool that makes the difference, it's the surgeon. Same with tools/payloads. Just because someone gives you something to use doesn't mean you know what to do at all. Whether you give me an airplane or not doesn't change the fact I don't know anything about using it.

[@JohnnyARants]

I feel like I’m learning this soo slowly it’s frustrating. The past year this is all that’s been on my mind. I swear when I learn this I’m going to create my own internship program

[@chaospixxie]

Oh I feel so called out 🤣 but you're right. Thanks for saying it out loud. I'm saving this video for when I get stuck on the hamster wheel of study.

[@mhdshl8502]

i have never subscribed to a channel this quick. you are truly inspiring.

[@V.WalkingTours]

I started to study pentesting 3 weeks ago and this was my idea, now I will put it into practice! Thank you!

[@ahmedezealdean6189]

every time i feel that i am getting lazy or feeling like giving up, i watch nahamsec videos❤❤❤

[@btspurplebutterfly]

i dont know if you see this or not but i dont but i get so scared when i choose website for testing i get confused.... even if i choose website or any private program i have lot of questions running in my mind... scared of lot of rules and restrictions all that website put in descriptions... and i cant focus on website and one bug i get bored easily maybe because it take too much time and it doesn't give instant reward aur any satisfaction like we get from ctf... in the the conclusion i dont have patience and focus or maybe i dont know my goal... i dont what should i do... i am just lost in my mind...

[@btspurplebutterfly]

I take me lot courage to say this I never really comment on youtube... and I didn't even share this problem to my hacking teacher... it's so....😕

[@NahamSec]

That's normal. It's normal to feel like this if you aren't getting any results. My only advice for you is to find a large organization and just keep staying consistent while still taking a break. Don't set any expectations. Do it for fun until you are comfortable with the entire process. I know it's not easy but hang in there :)

[@CybersecurityProjects]

thank you so much for this true video i have been learning and consuming a lot of content without getting my hands dirty i found myself making no progress. this year i have put hands-on learning and applied everything and i found that i am making progress

[@cybersecroot]

The best lecturer and professor ❤🙌

[@josephmwanza6363]

my first bug and bounty will be dedicated to you for the inspiration

[@RivuDonTech]

I second that.

[@AlienX-p2f]

Just learnt the vulnerabilities. Now learning the tools. Hopefully, by December I'll be back

[@mhdshl8502]

how's it going dude : ) got a bounty yet?

[@AlienX-p2f]

@@mhdshl8502 I'm still hunting. Not yet! We still psuh

[@forfun8237]

@@AlienX-p2f Have You Got One Now, Wish You Got.

[@zacharyjohnston70]

My plan is to finish off the PNPT study course, then hitting boxes and bounties to beef that resume for getting a red team position.

[@nnofficial2414]

You are a kind teacher. Keep it up!

[@clementtino2693]

You'll be the first to know when I win my first bounty

[@NahamSec]

We are going to make it happen this year 💪🏼

[@3rdNumberOfPi]

I'm going to let my parents know 1st, 2nd is here, 3rd is my girlfriend

[@Anonymous-cx7ht]

​@@3rdNumberOfPi ❤

[@berthold9582]

I really had to be told to stop learning and really move on to the real target BBP thank you sir🤝

[@gamingwithakprince5308]

Bruh your the one always a inspiration to find my first bug and I find my first bug yet but soon i will find it and I will dedicate to u❤💀bruh

[@0xbeven462]

Truth, but with you posting these nice vids we keep in the ➰

[@mateo__2023]

Thanks for all your contents. I reported 2 bug but they closed as information before 3 weeks i will back agin and i will get valid bug soon. Thanks❤

[@NahamSec]

You’ve got this 💪🏼

[@martinsuperfind7779]

Here is a tip from me, film in 60frames.

[@RivuDonTech]

Thank you for providing such great content, This video was much needed. I often study alot , have done plenty of rooms as well, now i need to just start doing it. Thanks alot keep up the good work looking forward to seeing more, Until next time !

[@jugalchaudhary8943]

This is so helpful, Thanks Sir for the cool tips

[@PuneetSaini-p6j]

hey can u tell us how many languages to know before u get into bug bounty

[@haxixi7035]

Thank you so much!

[@LoneStarBassPursuit]

So if someone is new into it where would you have them start?

[@rahmat_qurishi]

Great advices❤thanks for the video

[@shriyanssudhi4545]

I just submitted a bug to a company, Blind SSRF on victim's machine + IP disclosure. Hope it gets triaged :) Thanks for your content as it pushed me to something called "I quit recon" and finding bugs 😅

[@NahamSec]

Good luck!! 🙏🏼

[@dev__004]

Let us know if it got triaged ;)

[@thades0001]

Has triaged?

[@shriyanssudhi4545]

@@thades0001 Yes. Resolved and swag shipped

[@haxurn-h4l]

Thank you sir, I hope one day I will be from top 10 hackers

[@NahamSec]

🤞🏽🤞🏽

[@natanaelconcha92]

Does anyone have the link to the podcast he mentioned?

[@bigboycdznutz2079]

it's called "Critical Thinking - Bug Bounty Podcast"

[@dev__004]

One of the best advices We can get on BugBounty

[@mr_robot1587]

Love you ben bro 💕

[@NahamSec]

🥰🥰

[@chinedumichael8776]

nice video . pls where can i get the justin shout broadcast? critical thinking and his youtube channel

[@sokiuwu]

Your nose is at angle and i just can't unsee it and can't focus on the video 😂😭

[@247-md.nayeemsarkar3]

Thank you ❤❤❤

[@mehrankurd]

thanks a lot agha.

[@DanialRanjbar-u7t]

😂

[@abhisheksangule6027]

if i found bug or loop hole in youtube so does youtube will pay to me or not if yes what will be payment and where i can report the bug

[@xlight55]

Help me please, How to choose a bugbounty program for a beginner

[@MrBrooks89]

The people watching these types of videos are newbs and I think it would be cool to provide links to content you mention. The BBPs and VDP sites etc in the description or pin comment.

[@abman2402]

great video!!! if you can next make a video about how to build our methodology :)

[@sudani0zak]

Thank you

[@nguyenthanhloc3878]

thanks for your advice! From Viet Nam

[@Death_User666]

Doing this all day everyday

[@shinobi0x1]

I love this video!

[@leghdaf]

Great Content ...

[@pinskiller9914]

I love you for these words. thank you very much

[@spider_sec]

starting now

[@mokiller01]

New sub, thank you

[@yassinech7824]

yep, i started found 3 bugs, but no bounty

[@221B-wg4dc]

[@NahamSec]

🌊

[@bugs-lk3jf]

Great Content

[@mmnahian]

thank you Naham

[@alidashti5385]

Hey guys & ben is it normal starting bug bounty learning and starting with a target for 5 months still getting informatives ??? i think am a lot behind

[@abdonito8254]

me for 2 years btw

[@alidashti5385]

@@abdonito8254 wow that's amazing maybe our next bug will be four digits we just need to be patience

[@0xm1racle]

Yes. Mine was 7 months before I got my bounty

[@Rocks_roxks9]

Best motivation 🤩🤩🤗

[@makedredd299]

Amen! 🙏

[@l00_f00]

Anyone here so we can be friends and learn together?

[@muhammaddevv]

hi, how do we connect? lets do it

[@mohammadrezaabbasi4841]

Merci Naham, damet garm :))

[@darkceid]

Very good 🎉

[@suryaroja03]

great thank yo....

[@__CJ.__]

Than you ❤❤

[@shubham_srt]

thanks :)

[@georgeg7712]

This helped a-lot,

[@imosolar]

Good KZbin but you need to talk more about the real bugbouty method than your self process

[@NahamSec]

Give me a few weeks ;)

[@Ajay-kz6zw]

😎

[@Ajay-kz6zw]

Upload some live bug hunting Manuall way🙏

[@MFoster392]

I know rite 100%

[@grassy-p12]

I thought i was first to comment😍

[@HYBERN]

😘❤

[@ٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴٴٴ]

is it possible to do bug hunting as a full time job? I'm a Computer Science engineer from India.

[@prakhar0x01]

Really helpfull