The Bug Hunter's Methodology - Application Analysis | Jason Haddix

[@AnthonyMcqueen1987]

Unlike most top researchers out there who do nothing but flex their bounties and give cryptic generic advise or how they got those bugs to me those people add nothing to the community. But people like Haddix who doesnt show off how much he has made or flex his bounties actually explains in detail what he does. He also updates his style and methodology and its not for everyone but he does give detail to how he finds bugs and does his recon unlike most out there and i respect that. Researchers who flex their bounties offer nothing to the community Researchers like Haddix offer a lot to the community.

[@auwalsalisu7889]

you said nothing but pure 100% truth, you literally spoke my mind

[@AnthonyMcqueen1987]

@auwalsalisu7889 I am just sick of researchers out there who do nothing and show off their bounties. These people make the profession worse IMO and add nothing. Haddix on the other hand I respect.

[@shiiswii4136]

​@@AnthonyMcqueen1987look up Ryan John and ippsec, these guys are pure fundamentals and no nonsense in the videos

[@Denis-xl8jx]

Necro thread but what else do you guys watch? I've been putting off watching these talks because 95% of them are literally just people saying nothing whilst flexing bounties, like "we did some recon, found a subdomain, found XSS, escaped some defenses, and boom 10k bounty", 15 mins video. No techniques, payloads, nothing

[@TheZenOfWeb3]

I'll focus on Jason Haddix's teaching and repeat them all over till I find my first bounty and I'll update here. 🤞

[@skysunset877]

I'm deeply grateful that you explained this specific procedure for bugbounty. As a beginner, it helped me a lot with my studies.

[@goohaver]

same here. good luck homie

[@madcane13]

json headache... utterly... no words can explain how brilliant he is... you rock

[@rynomas4948]

He is haddix bro, not headache. 😆

[@viralledshow7079]

@@rynomas4948might be auto correct error brother....!😂

[@wk8173]

@@rynomas4948 grateful he didn't go for json headless💀

[@SankizTime]

Lmao😂

[@iqyou-gw4kd]

Thank you everyone for helping the community evolve

[@eyephpmyadmin6988]

Took notes on everything, every tool, all the methodology

[@MdMilonHossainNil]

❤❤Oh my God, this is what I've been waiting for!! It looks beautiful!!❤❤

[@popo_hack]

Thank you Jason for this amazing presentation, it was very fruitful with alot of knowledge. I think it's very important to know where to start testing and what are the tools that can help you doing that😀

[@AlecMaly]

Great presentation! Thank you for sharing your expertise!

[@AmineAb]

Really informative talk, but at the end he wasn’t using Notion for the note-taking part as stated, it was Obsidian.

[@esamlasheen453]

hhh i see it too

[@nathanbolen7624]

i love these talks, still relevant today

[@Suckit-b6k]

8:30 is an incredible moment

[@emanuelepicariello]

Great video thanks, it’s time to build a proper methodology now 🕵🏽‍♂️

[@fp1036]

Thank you for your passionate sharing Sir!

[@william_ade]

how can we get the slides ??

[@0xfsec]

Can I get the slide presentation?

[@godzab]

I second this!

[@william_ade]

This is brilliant !

[@sapienshack1711]

Jason Haddix you are awesome

[@4liraah]

Thanks for the talk! Any chance we can get a link to the slides?

[@Booom1444-_-]

Slides?

[@actuallyclover]

I went to college with Corben! Super smart guy

[@wise.wanderer.00]

Very informative talk

[@سامرسعيد-ي1ب]

“There are bugs in every single aplication”

[@aalekhmotani3877]

Thanks a lot for all this

[@Khal_Rheg0]

Thank you!

[@esamlasheen453]

45:36 Jason It's obsidian not notion!

[@bugs-lk3jf]

Great Content , like a Boss

[@anasshaikh5778]

Rustscan might not be helpful Since most of the programs have speed limitations like 10 req/s etc..

[@hamidrahamaabakar7995]

Good morning I'm very appreciate you

[@bountyproofs]

if you don't CREATE your own METHODOLOGY this is worth NOTHING for YOU

[@samgold9151]

Thank you

[@reactivicky]

Nice tips.

[@mariarahelvarnhagen2729]

The Financial Instruments Game

[@thehackr.]

nyc one

[@ExploitDeveloper]

thats good

[@TheCyberWarriorGuy]

Legend :)

[@shantanusharma5624]

Woah!! I'm the 1Kth liker of this video

[@garywilburn7384]

I'll give you a dollar if you learn to pronounce "obligatory" properly 😂

[@ll-ruby..gloom-ll]

he did

[@CaseyStrouse]

jsnice is the best tool I've found for making sense of obfuscated js. Definitely check it out.

[@abd9273ndhHN]

where to find the slides file ?

[@awanakb4867]

how can i find these word lists

[@AmineAb]

Everthing is on the talk.. if you can’t find those wordlists, I don’t know how you will find bugs

[@awanakb4867]

@@AmineAb i found them already. it just needed some attention.