Watch me hack a bug bounty-like target from scratch.

In this video, I will demonstrate a bug bounty hunting methodology on a CTF website that mimics a bug bounty target. I will start from scratch and become admin on multiple web applications. Many techniques will be used: Subdomain enumeration, directory bruteforcing, using tools such as assetfinder, ffuf and Burp Suite Intruder.
- Download your FREE Web hacking LAB: thehackerish.com/owasp-top-10...
- Read more on the blog: thehackerish.com/my-bug-bount...
- Support this work: thehackerish.com/how-to-support
- Facebook Page: / thehackerish
- Follow us on Twitter: / thehackerish
- Listen on Anchor: anchor.fm/thehackerish- Listen on Spotify: open.spotify.com/show/4Ht8jEb...
- Listen on Google Podcasts: podcasts.google.com/?feed=aHR...
Thumbnail photo by Andrea Piacquadio from Pexels

[@itsalgore]

This is the most educative video so far, been going in circles

[@CristiVladZ]

Looking forward to reading it!

[@goooooo9197]

I think you don’t do ctf you do real thing called bug bounty

[@TheWhaleon]

I've taken a few bounty Udemy courses and have watched a ton of video guides on youtube and other places. I wouldn't say I'm new to the content but I'm definitely not a professional when it comes to bug bounties. I'm not even 5 minutes into this video and have already dubbed this one of the best beginner videos I've seen so far. Why? Because the step-by-step example methodology and information is gold.. Not really found in other places as far as I've seen so far. Other typically explain their seemingly complex methodology that they have adopted, and beginner courses tend to focus on very beginner content. This has been middle ground information that is really useful! Looking forward to more!

[@thehackerish]

I am glad your found the content helpful! Thanks for sharing your feedback!

[@bertrandfossung1216]

This video met me at the right time. Thank you very much. I'll definitely learn a lot from it.

[@thehackerish]

Glad the timing was perfect for you ! Enjoy

[@avijitmazumder1762]

Just the video I wanted. Thanks.

[@medjassertoubib4467]

those are the kind of video we want to see . great video dude wish you all the best

[@thehackerish]

Thanks!

[@Xplo8E]

Finally what I wanted I got🔥❤️👍

[@a.for.arun_]

Great content 👍🏻

[@xrfox1634]

Thanks for the video!

[@thehackerish]

Enjoy! my pleasure :)

[@jissjose1382]

This was the one i searching for

[@thehackerish]

I am glad you liked it :) Enjoy!

[@user-tg6vk4ig3i]

Awesome. Maybe you can show us more challenges from this website and how you solve them:) It was a great help for me understanding how an Bug Bounty researcher is thinking!

[@thehackerish]

As much as I'd love to, this might spoil the fun for you and skew the leaderboard on the website. I will think about it though.

[@user-tg6vk4ig3i]

@@thehackerish Thank you so much!

[@goodboy8833]

Very Good Quality content.

[@thehackerish]

Thank you

[@ahmedehab6899]

great video i'm Looking forward to reading the book

[@thehackerish]

Hope you enjoy it!

[@xbparmar]

Awesome ❤️

[@thehackerish]

Thank you! Cheers!

[@Adam-wc5ol]

Nice video

[@chrismcnabb3134]

Great video! Thanks! Is the "A Bug Bounty Hunting Journey" book available yet?

[@thehackerish]

It is available: www.amazon.com/dp/B08T81PP65/

[@psychoSherlock]

You deserve more 👏👏👏

[@thehackerish]

Appreciate your comment! Share the channel in your hacking surroundings buddies :)

[@psychoSherlock]

@@thehackerish did already..... Ma discord buddies are on the way.... 😄

[@thehackerish]

@@psychoSherlock You are the best!

[@psychoSherlock]

@@thehackerish Nop, you are. I felt like you teach something in a way no other KZbinrs does........ That's y I asked them....

[@darshanjogi5781]

nice video

[@thehackerish]

Thanks

[@naumanalam1]

I just say woowwwww

[@jbrown8274]

so do the flags coincide with vulnerabilities within the domain, if this was real life would those flags be something that could be abused and therefore reported in a BB report?

[@thehackerish]

Some, not really. Others, definitely! It depends on the situation.

[@vihangadeshan2587]

Really Helpful. Where can I find the e-book (A bug bounty hunting journey...)

[@thehackerish]

Will be shared once ready :)

[@vihangadeshan2587]

@@thehackerish looking fwd to reading it :)

[@androzilla9825]

It’s ready or not 🌝

[@zerobyte536]

Lol clicked video because it said you were going to hack an actual bugbounty target, then i see its a ctf. Was going to say how did het get to release this! Every bugbounty i have ever done has a non-disclosure. Lol any way good video for beginners

[@thehackerish]

I had permission from one developer to release a video doing bug bounty, well... web hacking, cuz I did it for free. Check it out, kzbin.info/www/bejne/l5qyomCvhN-ajZI

[@maheshkarunanithi2970]

alternative for burp collabrator

[@position876]

When did a CTF become a "bug bounty target"?

[@thehackerish]

When we started watching new websites providing bug bounty-like challenges in the form of a CTF.

[@Arfat-Khan]

I have exploit no rate limit, but now its been duplicate, what else i can do based on no rate limit. Further what can i exploit?

[@thehackerish]

bruteforce directories for interesting ones? passwod spraying using a custom wordlist?

[@Arfat-Khan]

@@thehackerish ok thanks

[@asaad0x]

Wow That was so smooth makes it look very easy to be hacker 😁 keep going bro

[@karthik3913]

Idk why iam always finding errors while running the tools I applied as same as u applied