Practical Bug Hunting – A Practical Guide, by Hema Kumar

About Course

In this Course you will get hands on techniques in Bug Bounties which lot of hackers do on day to day life as full time or part time bug bounty hunter and will be covered from Basic to Advanced level more on hands on and less on theory and we will be explaining all my techniques along with the tools which i have written and awesome tools written by great hackers and you will be all set to start Bug Hunting on your own after this course is completed.

Hey, Hacker enthusiasts. Have you ever wanted to learn how hackers:

Get access to internal services
compromise databases
steal peoples user accounts

Course Content

1. Introduction

1. About Hema Kumar

00:00
2. About Blake

00:00
4. Recon with

00:00
5. Another Recon Video

00:00
6. Setting up our Environment

00:00

2. All Interesting Tools

3. Cross-Site-Scripting

4. Insecure Direct Object Reference

5. Subdomain Takeovers

6. Server Side Request Forgery

7. Open Redirect Vulnerability

8. Cross Site Request Forgery

9. SAML Exploitation

10. Cross Origin Resource Sharing

11. SQL Injection

12. Android Exploitation

13. Server Side Template Injection

14. XML External Entity Injection

15. Source Code Review

16. Shell Command Injection

About Course

What Will You Learn?

Course Content

1. Introduction

1. About Hema Kumar

2. About Blake

4. Recon with

5. Another Recon Video

6. Setting up our Environment

2. All Interesting Tools

1. Tools I Use

3. Cross-Site-Scripting

1. Cross-Site-Scripting – Lecture

2. Cross-Site-Scripting – Techniques

3. Real Life Cross-Site-Scripting

4. Real Life Stored Cross-Site-Scripting

5. Cross-Site-Scripting – SVG File Uploads

4. Insecure Direct Object Reference

1. IDOR on paypal

2. Real Life IDOR

5. Subdomain Takeovers

1. Subdomain Takeover Automation

2. Subdomain Takeover Technique

3. Mass Subdomain Takeovers with Chaos

6. Server Side Request Forgery

1. SSRF – Basic Techniques

2. SSRF – Advanced Techniques

7. Open Redirect Vulnerability

1. Open Redirect Vulnerability with @hemanth1261

2. Open Redirect Oauth2 Takeovers

8. Cross Site Request Forgery

1. CSRF – Techniques

9. SAML Exploitation

1. SAML – Techniques

10. Cross Origin Resource Sharing

1. CORS – Techniques

2. Real Life CORS

11. SQL Injection

1. GraphQL – Discovery & Introspection

2. GraphQL – SQL Injection

3. SQL Injection – Lecture

12. Android Exploitation

1. Android – Exploitation Part 1

2. Android – Exploitation Part 2

3. MOBSF Android Exploitation

13. Server Side Template Injection

1. SSTI – Techniques

14. XML External Entity Injection

1. Detecting & Exploiting XXE

15. Source Code Review

1. Hacking With Javascript

16. Shell Command Injection

1. OS Command Injection