How I Earned $200 in just 10 minutes

#bugbounty #hackerone #technosaviour
Hackerone is one of the best platforms for security researchers and beginners.
hackerone.com/hacktivity
HackerOne Report
hackerone.com/reports/997198

[@KINGSTARR786]

LOL.. I got $100 for this same Vulnerability after watching your video😁😁😍🤩

[@TechnoSaviour]

🎉 congrats buddy, glad to know this video helped

[@KINGSTARR786]

@@TechnoSaviour Really appreciated Man.. Keep it up.. and you know, this is my first bounty as well.. :))🥰

[@hakeitek1851]

@@KINGSTARR786 to which website you tried this?

[@mohamadtaha9091]

Really

[@KINGSTARR786]

@@mohamadtaha9091 yes bro

[@kadelwoody1213]

who do you report the bug too in order to collect on bounty ? this is so awesomely simply smart

[@sabindira3158]

Excellent brother we need more such videos

[@steiner254]

Seen this and already reported a bug in less 5 min... Cheers bro :)

[@hexbrokers9115]

Wooow nice bug hunt on low Please teach us bug bounty from scratch and focous on low compition nich.

[@ahtisham4752]

Now tell me after how many days did you get your bounty after reporting this issue.?

[@yaswanthkumar409]

I founded and reported the same vulnerability to 5 programs but no program accepted all of them closed it as informative. 😢 😢 You are so lucky that content spoofing has been accepted in your case and also rewarded a bounty.

[@quietube.]

Bro it does have impact of you find it in sensitive endpoint rather on non sensitive one

[@PranshuSethi]

Same bro, marked as informative...

[@congnguyen3461]

Hi, I just wonder why text injection can lead to CSRF.

[@febinfrancis4730]

Thats how a hacker thinks

[@preethammm]

Lol, No company accepts open redirect as a valid bug unless and until you can escalate it to something else.

[@jonnydeep3342]

we know that how many time west to find bug

[@PradeepKumar-dg1jm]

Can you please show how did you found those issues more clearly

[@tnvwolfgaming9029]

Yes bro I am also want

[@angelgarciaaguazul789]

Hi friends. Payments apply in dollars in any country ???????

[@hackeryajemaa]

how did you got bounty paypal or in bank

[@AkashSharma-ml2lz]

Bro I'm new to bug bounty,.Can u please tell me what is P1 level,P2,P3 P4level vulnerability ??

[@googlewebcreator814]

P stands for priority P1 means Critical P2 High P3 Medium P4 Low & P5 Informative ( No Bounty for P5 )

[@soloh4cker]

Damn.. this was an excellent find!!!

[@curinpython3827]

Bro ,i have question

[@67percenthsratio]

I got a question. Are there people on these websites who work for free? I’ve heard that there were. I’m not sure why they’d even do that.

[@YoutubeShorties69]

Yes they work on VPD's(Vulnerability Disclosure Program) You work for free but in return you get your profile higher in points leading to private program invitations

[@psm876]

Awesome bro... Thanks for sharing ❤️❤️

[@vesmanmartin7628]

Bro I reported the same bug in other domain in BugCrowd they treat it as P5 as per the BugCrowd VRT. Is there any possibile to lead it to P4 or P3 even ?

[@TechnoSaviour]

Yes, like I mentioned most won't accept it. But you might get lucky

[@aviralgupta9869]

I got 300$ for improper authentication

[@TechnoSaviour]

Awesome

[@NoobMaster-us7ih]

is this work or not ? please tell me truth...

[@KingsGuardVids]

Well done bro. Good job

[@tamimhasan2142]

but brother it is out of scope on their program so how they give you bounty?

[@TechnoSaviour]

It was in scope when I reported

[@sldw3221]

@@TechnoSaviour I found version disclosure but it is not in out of scope. Should i report it bro?

[@abdulrahmanhs8162]

What does out of sope means?

[@travelelaka]

text injection is now not considered a bug bro

[@djdkdkkrkfssglg2255]

Why bro?

[@travelelaka]

@@djdkdkkrkfssglg2255 they will mark it informational or out of scope bro its not a bug until you leverage its impact

[@shreyanshraj688]

From where i should start learning bug bounty???

[@TechnoSaviour]

There are tons of KZbin channel and Udemy courses

[@vesmanmartin7628]

Where I can contact you bro ?

[@tirth6373]

I got 1000$ for this Same Vulnerability

[@shammahagwor9205]

Most programs will not accept this , high chance of getting an N/A

[@TechnoSaviour]

True, I was trying my luck. Looks like got lucky

[@techietouche877]

@@TechnoSaviour Not just luck but a good report explaining the impact of bug properly might pay you more than allocated for a bug.

[@curinpython3827]

bro ,what if the site is not legit can we still submit

[@TechnoSaviour]

You can, but if there exist no bug bounty or responsible disclosure then they won't pay.

[@vivekghinaiya6121]

today i know text injection named vulnerability exist in world , btw thanks

[@mynamejeff2880]

there are a lot of injection like SQL,no SQL,text , html etc

[@xoro163]

@@mynamejeff2880 is it hard to learn all these?

[@villagerstown]

today i also reported same vuln. now i am waiting for reply....😁😍🤩

[@anonwolf7730]

Did you get reward

[@villagerstown]

no bro. it was closed as Not applicable

[@villagerstown]

but i recieved 350$ for finding xss in xiaomi 🥳

[@anonwolf7730]

@@villagerstown bro how to do xss I only know SQL injection

[@anonwolf7730]

@@villagerstown which tool you used bro

[@0xsudip892]

Cool

[@hackeryajemaa]

bro bounty kayse ata hai

[@ramzi1727]

how do you cash out the 200$ you got?

[@TechnoSaviour]

There are multiple modes like PayPal bank transfer etc

[@midhun6151]

Nice bro 👍🏻

[@tsrisanath8441]

Great bro

[@lmfao69420]

TIL that this is considered a vulnerability lol

[@jonnydeep3342]

bhai koi corce hoga to bata dena

[@TechnoSaviour]

Bhai, I just read hacker one reports and medium blogs

[@jyotiranjan5343]

@@TechnoSaviour bhai u didn't took any course?🥺😳😳

[@h4cker]

I reported the same issue on 3 companies and get nothing. All reports got not applicable...😣

[@TechnoSaviour]

Yes it's a low hanging bug found in almost all applications, they might consider if they are very prone to phishing

[@TechnoSaviour]

It was my first report, I never reported this again rather I focus on business logic flaws

[@h4cker]

@@TechnoSaviour it depends on the company.

[@hatakekakashi7758]

Too bad its considered p5 in bugcrowd :(

[@TechnoSaviour]

Hackerone it was considered, but like I said in the video it depends on projects.

[@hatakekakashi7758]

Ahh bet, thanks for clearing it up Good finding tho keep it up :)

[@Tech_reviews6]

My one is out of scope 😌

[@jonnydeep3342]

bro help to find bug

[@tonynorrington3371]

How to write a bug bounty email or text to report

[@jhonnysins2465]

i just reported same vuln after watching your video. hope i get bounty xd

[@jhonnysins2465]

@@t0rkel nop, closed NA

[@loveyadav1201]

Bro but i did not get any reward for this vulnerability

[@TechnoSaviour]

As, I mentioned this is a low hanging fruit many programs don't give rewards. But there is no harm in trying out

[@jonellmendelebar554]

bro itry but it failed

[@MaNaS_thAKuR]

can anyone teach me something :(

[@mdyaminhasan2396]

anyone can teach me bug bounty?

[@dennistyler2885]

I'll advise you to invest in crypto like I do and make good profits as it's currently the most profitable investment after Telsa.

[@ahtisham4752]

Yes sub and like has been done

[@mchig2195]

India accent IS terrible, i didnt understand, nothing

[@TechnoSaviour]

Feel free not to watch any indian videos.

[@itsallbts3286]

@@TechnoSaviour op bro he is now smoked

[@zipp5022]

then bag off dude, why you even bother to write this comment.

[@agusten7]

Maybe is because you are dumb

[@quietube.]

Text injection in not a bug now

[@arvind2791]

#hackerone

[@hadhikhan7730]

Brother if u don't mind contact on dm

[@Thunder-dp7du]

Great bro