Finding Your First Bug: Goal Setting / Remote Code Execution (RCE)

Hi everyone, welcome to this video in the "Finding Your First Bug" in this series I'm going to go over some good first bugs: explain what they are, how to find them, show some examples of real bugs in the wild that paid out and finally do a practical example with Burp on a real target.

In this video I trick you all with a bait and switch, this video claims to be about RCEs but actually covers goal setting, motivation, and learning. A lot of people thought I was serious when I uploaded an image on Twitter about this video, so I decided to make it. Instead of talking about RCEs I wanted to talk instead about having realistic goals. In this video, I discuss SMART goals, GROW action plans, imposter syndrome, and illusionary superiority, before finally ending with introspection, improvement, the skills a bug bounty hunter needs.

I hope you find this useful and helpful to your career growth

[stackoverflow]

Absolutely love Katie's tutorials since they also cover soft skills for progressive improvement.

[nunotomas]

When I decided to watch the video I didn't even knew what RCE was. I was in the mood for a technical video even though RCE was not on my bug list to study. I was disappointed for a split second but the video made me decide to reset my goals and got me knowledge for other points as well. great video! Don't be sad about the clickbait, sometimes what a person wants it's not what they need at a given time.

[Timm]

It was no real clickbait in my opinion, i was like "lets start with a RCE" too, i changed my mind at thats pretty important, thank u!

[nullnull]

I can't explain how much I relate to this video, before exactly a year my goal was to find an RCE, I started as a complete beginner in the sec field, and here I am today full of frustration, tho I really learend a lot this year about RCEs and low level stuff, but it sucks not to meet your goals.

Thank you for making me re think about my goals, this really helps in keep a good mental health.

Keep it up, cheers.

[svenc]

What a great video! I am watching the "finding your first bug" series and almost skipped this one. I don't know why but I thought RCEs somehow didn't fit at this stage. But man am I glad that I did not skip it. I took so much from this video. Great job! I love your way of teaching. Thank you and please keep up the great work!

[conintava]

Not gonna lie. Came for RCE. Left with so much more.

[MentalMarathon_]

Great video actually wanted to do a big rce until I finally researched but I still want to just will take more time like you are saying

Great video and also very good lessons on Bug Crowd University :)

[televizyoncum]

You are the best person in the bug hunting community keep up the good work :))

[PTD]

Excellent video ! made me laugh although i had a feeling this is where it was going - only way to gain technical bugs is through hard work / study

[TaiKibris]

Never under estimate ppls abilities, some one can find an RCE more quicker then some one doing it for years

[johndecosta]

Great subject matter. You are doing a fantastic service for the community. Thank you and good luck for 2020

[modmah]

thanks so much for the useful content!

[goooooo]

sis can you plz tell me what are wayback urls and why they are important

[lilpp]

Lol I was so suppicious abt this video, I knew it

[oxovi]

Awesome work ❤❤
Btw did you found any rce on BB program??

[ggmaxx]

the very first time I am happy to be...hoodwinked :)

[manojnirmal]

A good video for beginners before new year. Good advice!

[ahmedezzat]

My first bug was RCE it's not impossible it's just super rare to happen

[seunghwanyoon]

I found a SSTI vuln using ERB template and succeeded spawning shell using tplmap --os-shell. However, I have no idea how I can use system() function or other command injection to get shell with out using tplmap. I tried having reverse shell using nc but failed. Any suggestions?

[xx]

i had a goal of getting my first bug and i found 3 (1 XSS, 1 IDOR, 1 logic) bugs now i have a goal before moving to next bug type i wanna get my first bounty for that i have been looking at a target for 4 days and found nothing, should i move to other program or stay in this ?