Intermediate Bug Bounty Course | Web Application Hacking

All my videos are for educational purposes with bug bounty hunters and penetration testers in mind KZbin don't take down my videos 😉
In this course we cover an introduction to bug bounty hunting and web application hacking, ethical hacking in the world of cybersecurity. I did not include my API videos in this course if you would like you can check out my channel to find the API hacking videos!
All My Courses = www.phdsec.com/
Follow me on Twitter = / phd_security
• Beginner Bug Bounty Co...
chrome download - www.google.com/chrome/downloads/
chrome driver - chromedriver.chromium.org/dow...
0:00 About The Course
1:41 SSRF
24:14 Command Injection
50:11 FIle Upload
1:11:24 LFI RFI
1:25:28 Insecure Deserialization
1:40:31 JWT Tokens
2:01:09 Attacking WordPress
2:25:06 Python Tool Building

[@wardellcastles]

THANK YOU for an Intermediate Bug Bounty Course. So tired of watching videos showing an IDOR attack by changing id=1 to id=2 in the url.

[@mHas09]

Just finished the "Python Tool Building" part, as a beginner in BugBounty, I have to say this tutorial is very easy to understand and follow, thumbs up 🙂🙂🙂🙂

[@ryan_phdsec]

Thanks. I was worried the tools might be a bit much when I was making those videos!

[@sinos_karan9515]

Hello buddy!! I have to say a lot of thank to you !! Your language style is so clear , I can understand what you are saying , And your teaching methods are so clear !! Bring more and more courses like this and make a road map video for get a cyber security job and Cybersecurity related certificate !

[@jaimelannister196]

Great work! Keep up the amazing videos and you will have 100K subscribers in no time!!!

[@darrenmew3928]

This stuff is amazing man love the way you teach

[@anandkishore4426]

I was looking for someone like you. Excellent video and very well explained. Love from India 🇮🇳

[@jerfp8026]

Excellent content you contribute in Cyber Security field .♥️♥️💖💟

[@demo1905]

finally a clear and best explanation, thanks

[@BobBob-qm2bm]

PHD Security, this is how you drop the knowledge. Good content is king. Create it, and they will come!

[@naradakandawala4278]

This is what we all have been waiting for❤😍

[@SatanicDev]

On the concept of your issue with the integer acceptintg that input in correlation to the boolean vlaue; I have an idea. I don't have hardly any knowledge with PHP, but from what I have learnt over the years is that: a Boolean value is either true or false (or 1 and 0), you can set the same thing with an integer in binary notation. Boolean values are in correlation wtih binary values; hence why having the interger of 0 worked, as well as the boolean value of the cookie.

[@b4arabe132]

ty u so much i hope u win more and more in life u really helped us

[@johannes1498]

Thank you so much for this!

[@ryan_phdsec]

Thanks! I hope it it helpful!

[@zer0six472]

Another great video my brother 🤘

[@dileepkothapalli3022]

This is exactly what I wanted love the video ❤

[@junaidjaved4792]

Thank god another good vedio. Just compelte your beginner one. Now this thank-you so much sir 🙌

[@ryan_phdsec]

Most welcome 😊

[@dyepedmusic]

Sir you are the best🙌

[@mahdihasan42]

big fan of you sir

[@mypegionworld7612]

I wish i could like your videos a million times you are amaizing..

[@benjaminmunoz9136]

Hi there, great job! Thanks!

[@HDsT0rM]

Thank you sir

[@Donut-qt9mr]

thank you very much

[@hosseinkhirabadi1933]

Thank you for excellent content

[@suvash_shane]

thanks sir

[@lazylab2772]

seriously I Love your content.

[@amitabhmondal1298]

Good stuff man

[@TylerRake141]

I came across your channel recently and thank god i did your explanations helped me a lot. I was wondering if you could make a video on web technologies ? Since there are like different web development frameworks running on different web servers and there are CMS like WordPress too

[@ryan_phdsec]

Yes I can definitely do this! 😁 Thanks for the idea!

[@TylerRake141]

@@ryan_phdsec Thank you so much!! really looking forward to that video 😁

[@fahimhossain6685]

Love from Bangladesh. Great Mind with Big Heart.

[@sahariarsabbir2366]

Waah, amr deshi❤️

[@nguyenanghieu7342]

i expect advanced bug bounty from you soon

[@denverzimunya8303]

Thank you so much 🙏🏾

[@bettercallmanav]

Man, Seriously I Love your content. I will payback someday when I get a bounty.

[@efiita7554]

me too!!!

[@ryan_phdsec]

Glad you like it and I can be helpful!

[@VusalHasanli]

you are the best bro

[@orbitxyz7867]

Thanks😍

[@khmer_cyber_warrior]

You are the best

[@samsepi0l227]

i forgot how many times i said "thanks" to u. thanks...

[@nevildenis4723]

Great content as always. Can you please make a video on How to find admin panel of any website??

[@jxkz7]

do ffuf on website with wordlist of admin related words

[@ayoubyaghoobi1026]

the python section is not working. getting a lots of error. i think its needs a update

[@tahamasood6046]

Waiting for advance bug bounty course

[@vik0388]

after learning this where can i practice for improving my skill??

[@ryan_phdsec]

The best paid place if your new is tryhackme.com and if your a little more advanced then Hackthebox.com and if you are looking for something free you can check out this video: kzbin.info/www/bejne/g3Suqa19oayhn6c

[@ethiohacking]

thank you i can't wait for the advanced

[@emmanuelchinedum6998]

For the file upload how do i get access to the /torrent/upload? Do you have like a discord or community?

[@emmanuelchinedum6998]

Imagine im on a live target can the file upload methodology work on profile picture upload?

[@ryan_phdsec]

@@emmanuelchinedum6998 Yes it could. If it is a really popular web app like facebook then it likely is very secure and gets tested daily. I would recommend trying file uploads on unpaid bug bounty programs that are newly listed, as these are the least likely to have been tested.

[@ryan_phdsec]

I am working on getting a discord started and will be making it available in the very near future.

[@emmanuelchinedum6998]

@@ryan_phdsec alright. Ill check those. Ive been trying to get my first bug haha. Not so fortunate yet. So I decided to stop a while and consume some books.

[@emmanuelchinedum6998]

@@ryan_phdsec you got any material on open redirection?

[@aravind_raina07]

attacking wordpress is so confusing

[@SatanicDev]

This dude won't say wiener... 😂😂

[@docmalitt]

Hey dude really no idea how to thank you for such crazy amount of crazy good content - in such short time. Especially like the different levels you produce. I am an infosec hobbyist because I just have no willpower to study properly (ya know, understand the material, not just copy-pasta and then as soon as something slightly different comes up I get lost) after whole day at work... But I am advancing slowly because I love hacking and what is really hard to find (not impossible but pretty rare) is intermediary level of ... anything. There are gazillions Hacking 101, ZeroToHero... and that's great, but next level is ??? "chained LFI, SSRF to RCE bug" and I just watch like it's rocket science. So again.. thx.. cheers

[@ryan_phdsec]

I started as a hobby also! You never know where it will take you. Also, I know what it is like at the end of a day to come home and be exhausted. I do 4 months a year where I pick something I want to learn or get better at and I will get up at 3-4am and just focus on studying and practicing what I planned the night before. I found that to be easier for me. If I am getting up that early I am not going to waste my time 🤣

[@BobBob-qm2bm]

@@ryan_phdsec Very helpful approach to learning....thank you.

[@AshleyEhSMR]

You rockstar, you 🥺🥳🫶 How did you know!? Much appreciated 🙌