Esoteric Sub-Domain Enumeration Techniques
Explore advanced and unconventional sub-domain enumeration methods, their effectiveness, associated tools, and mitigation strategies for enhanced cybersecurity practices.
The State of Bug Bounties and Future Trends - Casey Ellis AMA
Insights on bug bounty industry trends, future prospects, and expert Q&A with Bugcrowd's CEO Casey Ellis, covering various aspects of cybersecurity and ethical hacking.
Writing Vulnerability Reports That Maximize Your Bounty Payouts
Learn to craft effective vulnerability reports that boost bounty payouts. Discover key strategies for communicating impact, providing proof of concept, and avoiding common mistakes in bug bounty submissions.
H@cktivitycon 2020 - Graphing Out Internal Networks with CVE-2020-13379 - Unauthed Grafana SSRF
Discover and exploit a critical SSRF vulnerability in Grafana, impacting thousands of companies. Learn methodology, see a live demo, and explore reporting and mass-exploitation experiences.
Pentesting vs Bug Bounty - Approaches and Methodologies
Explore the differences between bug bounty hunting and penetration testing methodologies, comparing approaches, impacts, and scoping techniques.
JavaScript for Hackers
Learn JavaScript essentials for ethical hacking with experts @STOKfredrik and @TomNomNomDotCom. Covers Chrome Dev Tools, DOM XSS, debugging, and impact assessment.
Native Code Crash Course
Learn native code hacking essentials: memory, bugs, protections, and bypasses. Gain insights into computer fundamentals and advanced exploitation techniques.
Burp Hacks for Bounty Hunters
Discover personal Burp Suite techniques for effective bug bounty hunting, enhancing your web application security testing skills and increasing your chances of finding vulnerabilities.
Security@ 2017 - Understanding Hacker Motives
Explore hacker motivations and experiences in bug bounty programs through insights from top hackers and industry experts. Learn about challenges, rewards, and the evolving security landscape.
Security and Hacking - Lessons from the MySpace Worm
Explore hacking insights from Samy Kamkar, renowned for the MySpace worm, as he shares his expertise and experiences in cybersecurity at the Security@ Conference.
Coordinated Vulnerability Disclosure Guide - AMA with CERT Authors
Insights on coordinated vulnerability disclosure from CERT Guide authors, covering principles, process improvement, and common challenges in cybersecurity reporting and management.
8 Ways to Almost Never Get a Dupe Again in Bug Bounty Hunting
Discover strategies to minimize duplicate bug reports in bug bounty hunting, including developing expertise, exploring unique targets, and leveraging personal strengths.
Hunting IDOR with Z-winK - Part 2
Dive deeper into hunting Insecure Direct Object Reference (IDOR) vulnerabilities for significant rewards. Learn advanced techniques and strategies from expert Z-winK in this follow-up presentation.
How I Hacked 55 Banks and Cryptocurrency Exchanges - LevelUpX Series 3
Alissa Knight reveals tactics used to breach 55 financial institutions, offering insights into vulnerabilities in FinTech apps and APIs. Learn from a veteran hacker's experience in cybersecurity.
It's Not a Vulnerability, It's a Feature - Exploiting Built-in Functionality
Explore how offensive security has evolved from CVEs to TTPs, and learn to leverage built-in features for security testing and potential monetization through creating and sharing TTPs.
How to Crush Bug Bounties in the First 12 Months
Comprehensive roadmap for new bug bounty hunters: boost knowledge, improve workflow, and achieve success in the first year. Tips for seasoned hackers included.
Car Hacking Explained for Bug Hunters - Automotive Security Vulnerabilities and Methodologies
Explore automotive security vulnerabilities, from IoT to CAN bus hacking. Learn methodologies, attack surfaces, and bug prioritization for car hacking, covering infotainment systems, APIs, and mobile apps.
Sticking With It: How to Choose a Target and Stay Motivated in Bug Bounty Programs
Learn strategies for selecting bug bounty targets, maintaining motivation during hacking, and deciding when to persist or move on. Gain insights from an experienced researcher on navigating the challenges of bug hunting.
Hackers Don't Wear Black Hoodies, They Wear Capes - Ethical Hacker Rights and Trust
Explore ethical hacking rights, challenges, and the importance of trust in infosec. Learn why community collaboration is crucial for encouraging ethical hacking and protecting vulnerabilities.
Crowdsourced Security: Insights from Industry Pioneers - Founder AMA
Explore crowdsourced security with industry pioneers, discussing its importance, future trends, and the motivations of bug bounty hunters in addressing sophisticated vulnerabilities.
Critical Security Issues and Trends for 2017
Explore critical security trends with industry experts, covering IoT vulnerabilities, crowdsourced testing, AI impacts, and evolving threats to prepare for the cybersecurity landscape of 2017.