CTF Walkthrough- Hacking An API with Snyk
Detailed walkthrough of API hacking in a Capture The Flag challenge, demonstrating practical offensive security techniques and vulnerability exploitation.
Attack Surface Management Series - Certificate Transparency
Learn about Certificate Transparency in attack surface management, exploring its importance and implementation in cybersecurity strategies.
Critical Bounties via Leaked API Keys
Discover techniques for finding leaked API keys on GitHub, both manually and using tools like TruffleHog. Learn how to leverage these findings for potential critical bounties in bug hunting.
Advent of Cyber - Web Exploitation - Cross-Site Scripting (XSS) Explained
Comprehensive explanation of Cross-site Scripting (XSS) in web security, covering its types, risks, and prevention methods. Practical insights for ethical hackers and cybersecurity enthusiasts.
Finding and Exploiting Hidden Functionality in Windows DLLs - LevelUpX Series 14
Explore hidden Windows DLL functionality, common bug patterns, and exploitation techniques for bug bounty hunters. Learn tools and methods to uncover vulnerabilities in web servers and network services.
Introduction to Web Hacking - OWASP Juice Shop
Comprehensive introduction to web hacking using OWASP Juice Shop, covering essential techniques and vulnerabilities for aspiring ethical hackers and security enthusiasts.
Bug Bounty Techniques: Recon, JavaScript Analysis, and Web Security Tools
Insightful discussion on bug bounty techniques, covering recon, JavaScript analysis, WAF bypassing, and utilizing the Wayback Machine for effective vulnerability discovery.
Learning Server Side Request Forgery Basics Using Portswigger's Web Security Academy
Explore Server Side Request Forgery (SSRF) basics through hands-on practice with Portswigger's Web Security Academy, enhancing your web security skills and understanding of this critical vulnerability.
Developing crtndstry - A Tool for Finding Root Subdomains - Live Coding and Explanation
Live coding session demonstrating the creation of crtndstry, a tool for discovering root subdomains. Gain insights into the developer's thought process and learn practical cybersecurity techniques.
Live Bug Bounty Recon Session on Yahoo.com - Subdomain Enumeration Techniques
Live bug bounty recon session exploring Verizon Media's Yahoo.com with @Securinti. Learn subdomain enumeration techniques, create a Recondb, and gain insights into effective reconnaissance strategies for ethical hacking.
Solving XSS Challenges from PortSwigger's Web Academy
Learn to tackle Cross-Site Scripting (XSS) challenges from PortSwigger's Web Academy, enhancing your web security skills and understanding of this critical vulnerability.
Live Bug Bounty Recon Session on Yahoo - Using Meg, Assetfinder, and Other Tools
Live bug bounty recon session demonstrating tools and techniques for reconnaissance on Yahoo, featuring guest @Tomnomnom. Covers creating wordlists, using meg and assetfinder, directory brute forcing, and crt.sh.
Live Bug Bounty Recon Session on Yahoo - Amass, crt.sh, and Dirsearch
Live bug bounty recon session demonstrating advanced techniques for discovering vulnerabilities on Yahoo, featuring tools like Amass, crt.sh, and dirsearch, with guest expert @TheDawgyg.
Live Bug Bounty Recon Session - August 18, 2019
Live bug bounty recon session covering techniques like JSParser, directory brute forcing, crt.sh, and API fuzzing. Expert guests share insights on effective reconnaissance strategies for ethical hacking.
Live Recon on Rockstar Games - Vulnerability Testing Methodology
zseano demonstrates vulnerability testing methodologies on Rockstar Games, showcasing tools like Burp Suite and techniques for identifying XSS and open redirects in this live recon session.
Live Recon and Automation on Shopify's Bug Bounty Program - TomNomNom
Explore live recon and automation techniques for Shopify's bug bounty program with expert insights, enhancing your skills in identifying vulnerabilities and maximizing bounty rewards.
Web App Testing - XXE, Input Validation, Broken Access Control, and More XSS
Explore advanced web app testing techniques including XXE, input validation, broken access control, and XSS. Enhance your ethical hacking skills and learn to identify critical vulnerabilities.
Attacking JWT - Header Injection Techniques
Learn techniques for attacking JSON Web Tokens through header injections, including algorithm and JWK header attacks. Gain practical insights into exploiting JWT vulnerabilities.
Hacking APIs - Fuzzing 101
Learn API fuzzing techniques for penetration testing and security assessment, with hands-on lab demonstrating practical application and methodology.
Cracking JSON Web Tokens - Understanding Security Vulnerabilities
Learn to understand, test, and crack JSON Web Tokens (JWTs) for enhanced web application security. Explore JWT structure, vulnerabilities, and best practices for implementation and protection.
Bypassing SQL Filters - SQL Injection Techniques
Learn advanced SQL injection techniques to bypass filters and secure web applications. Practical examples and strategies for penetration testing and ethical hacking.