Hidden in Plain Site - Disclosing Information via Your APIs - Peter Yaworski, Bugcrowd's LevelUp 2017
Explore information disclosure vulnerabilities in APIs and HTML sources, focusing on Rails design patterns and front-end frameworks. Learn detection techniques and real-world examples.
Doing Recon Like a Boss - Ben Sadeghipour, Bugcrowd's LevelUp 2017
Learn efficient hacking reconnaissance techniques, including methodologies for Amazon AWS, GitHub, asset identification, and QA, to enhance your cybersecurity skills and target assessment capabilities.
Reverse Engineering iOS Mobile Apps
Introduction to iOS mobile app reverse engineering, covering specific tools and techniques. Includes demonstration on a popular app and advanced usage examples.
Giving Back to the Bug Bounty Community - ZSeano, Bugcrowd's LevelUp
Learn advanced bug bounty techniques from top hacker ZSeano. Discover web vulnerabilities, improve your skills, and gain insights on professional conduct in the cybersecurity field.
Breaking Mobile App Protection Mechanisms - Ben Actis, Bugcrowd's LevelUp
Learn to identify and bypass mobile app protections like obfuscation, root detection, and certificate pinning. Discover techniques to reduce "hardened" apps to basic security levels.
Finding Hidden Gems in Old Bug Bounty Programs - Yappare, Bugcrowd's LevelUp 2017
Discover strategies for uncovering valuable bugs in established bug bounty programs, focusing on unique approaches and methodologies to maximize success in competitive environments.
How to Fail at Bug Bounty Hunting - Caleb Kinney, Bugcrowd's LevelUp 2017
Insights and tips for part-time bug bounty hunters: overcoming challenges, learning from failures, and staying motivated while balancing professional commitments.
Bug Bounty Hunting Methodology - Jason Haddix from Bugcrowd's LevelUp
Comprehensive web hacking methodology covering reconnaissance, scanning, and exploitation techniques for bug bounty hunters and security researchers.
Esoteric Sub-Domain Enumeration Techniques
Explore advanced and unconventional sub-domain enumeration methods, their effectiveness, associated tools, and mitigation strategies for enhanced cybersecurity practices.
The State of Bug Bounties and Future Trends - Casey Ellis AMA
Insights on bug bounty industry trends, future prospects, and expert Q&A with Bugcrowd's CEO Casey Ellis, covering various aspects of cybersecurity and ethical hacking.
Writing Vulnerability Reports That Maximize Your Bounty Payouts
Learn to craft effective vulnerability reports that boost bounty payouts. Discover key strategies for communicating impact, providing proof of concept, and avoiding common mistakes in bug bounty submissions.
H@cktivitycon 2020 - Graphing Out Internal Networks with CVE-2020-13379 - Unauthed Grafana SSRF
Discover and exploit a critical SSRF vulnerability in Grafana, impacting thousands of companies. Learn methodology, see a live demo, and explore reporting and mass-exploitation experiences.
A Starters Guide to Pentesting with OWASP
Learn essential web security concepts, OWASP Top 10 vulnerabilities, and practical pentesting techniques to enhance your cybersecurity skills and protect web applications effectively.
Pentesting vs Bug Bounty - Approaches and Methodologies
Explore the differences between bug bounty hunting and penetration testing methodologies, comparing approaches, impacts, and scoping techniques.
JavaScript for Hackers
Learn JavaScript essentials for ethical hacking with experts @STOKfredrik and @TomNomNomDotCom. Covers Chrome Dev Tools, DOM XSS, debugging, and impact assessment.
Native Code Crash Course
Learn native code hacking essentials: memory, bugs, protections, and bypasses. Gain insights into computer fundamentals and advanced exploitation techniques.
Burp Hacks for Bounty Hunters
Discover personal Burp Suite techniques for effective bug bounty hunting, enhancing your web application security testing skills and increasing your chances of finding vulnerabilities.
Attack Surface Reduction Strategies for Enhanced Security
Explore attack surface reduction strategies with Google Project Zero's Natalie Silvanovich, focusing on innovative techniques to enhance system security and minimize vulnerabilities.
Security@ 2017 - Understanding Hacker Motives
Explore hacker motivations and experiences in bug bounty programs through insights from top hackers and industry experts. Learn about challenges, rewards, and the evolving security landscape.
Security at Government Agencies - Hacking the US Government
Experts discuss hacking US government systems, vulnerability disclosure programs, and cybersecurity challenges in federal agencies. Insights on bug bounties, tech surges, and public-facing systems.
Security and Hacking - Lessons from the MySpace Worm
Explore hacking insights from Samy Kamkar, renowned for the MySpace worm, as he shares his expertise and experiences in cybersecurity at the Security@ Conference.