Common Open Redirection Bug Bounty Mistakes

preview_player
Показать описание
Let's talk about open redirections, their impact, and common mistakes made when submitting them to bug bounty programs.

▬ Continue the discussion ▬▬▬▬▬▬▬▬

▬ Table of Contents ▬▬▬▬▬▬▬▬▬▬▬
0:00 Introduction
3:52 the '@' operator
5:18 Intentional Redirects
6:41 Escalating
  1. codingo
  2. hackerone
  3. bugcrowd
  4. intigriti
  5. synack
  6. yeswehack
Рекомендации по теме
Common Open Redirection 0:11:01

Common Open Redirection Bug Bounty Mistakes

Open Redirect and 0:13:36

Open Redirect and How to Find It | Hacking Bug Bounty

Open Redirect | 0:00:37

Open Redirect | Intel | Bug Bounty POC

Open Redirect On 0:00:25

Open Redirect On Lenovo | Bug Bounty POC

How to hunt 0:15:30

How to hunt for Open Redirect Vulnerability | Bug Bounty

Open Redirect Vulnerability 0:08:34

Open Redirect Vulnerability Explained

$1000 open redirect 0:02:46

$1000 open redirect | Bug Bounty POC 2023

OPEN REDIRECTOIN TUTORIAL: 0:03:34

OPEN REDIRECTOIN TUTORIAL: HUNTING ON LIVE WEBSITE

$700 Open Redirect 0:01:11

$700 Open Redirect Vulnerability | Bug Bounty POC | CVE-2023-3568 | Improper Input Validation

Open Redirection Vulnerability 0:00:39

Open Redirection Vulnerability On BOT Section🤖 (bug bounty poc)

$250 Easy Win 0:00:30

$250 Easy Win for Open Redirect Vulnerability | POC | 2023 | Bug Bounty

Open Redirection + 0:02:39

Open Redirection + XSS || Live Site || Bug bounty || Chhota hacker ¶

Bug Bounty | 0:00:28

Bug Bounty | Open Redirect | OYOROOMS

Open Redirect SAP 0:00:28

Open Redirect SAP Vulnerability | KPN | Bug Bounty POC

What is Open 0:03:51

What is Open Redirect Vulnerability With Impact || bug bounty POC 2022

$50 Open Redirect 0:01:51

$50 Open Redirect Vulnerability | Bug Bounty PoC

Open Redirect Vulnerability 0:00:27

Open Redirect Vulnerability | Axway | Bug Bounty Poc

what is an 0:07:26

what is an open redirect vulnerability? (intermediate) anthony explains #389

Open redirect vulnerability 0:01:32

Open redirect vulnerability | Exploit delivery method - No click download

Open Redirect | 0:00:39

Open Redirect | Mydukaan | Bug Bounty POC

The Easiest way 0:02:38

The Easiest way to Find Redirect Vulnerability || Bug Bounty || POC || 2022

$200 Bounty for 0:01:30

$200 Bounty for Two Different Ways For Open Redirect Vulnerability|Unvalidated Redirects

$1,000 Bounty for 0:02:26

$1,000 Bounty for OPEN REDIRECT LOGIN & LOGOUT Vulnerability | BUG BOUNTY

Open redirection and 0:01:46

Open redirection and XSS on Hackerone Target Bug Bounty POC - Professor the Hunter

Комментарии
Автор

I should have watched this before I submitted what I thought was an open redirect because your first example with the "@" operator was the mistake I made. Which resulted in me having a non-appiclable. LOL. Oh well, you live and learn right? I am now using this opportunity to educate myself and understand better. Thank you always codingo!

ibotah
Автор

I really loved your content in recent days, you're just awesome ♥️

renganathanofficial
Автор

Triagger interaction like that really helps to understand the triagger minds.

ca
Автор

Great insight mate. Thanks for sharing.

abartandhakal
Автор

I watch a lot of bug bounty videos and you're my favorite, for sure top 3. I'd kill to have a 30 minute convo with you lol. #codingo

elite_fitness
Автор

Awesome content sir!

PS: It would be convenient if the links you're mentioning are in the description. Ofc, Except for the giveaways. Thank you!

kittoh_
Автор

Thanx for Open Redirect Clarification.Wish to request you, if its possible for you to make a small Video on the Bug Status Timeline .Most of the Bug Bounty Hunters are Unaware of the Timeline for Bugs getting resolved/fixed & ultimately being paid Bug Bounty, after the Bug is confirmed by the Security Team. Most of the time there is no communication from the Security Team to the Bug Hunters for a long time . This leads to Anxiety/Frustration among the Bug Hunters. For example, Google VRP team confirmed 2 Bugs as P3 & P4 and the status is assigned & open . Its been this way for last 40 days . Apple VRP is getting Bad Reputation among the Bug Hunters . A Video on the Bug Status Timeline will go a long way to help Bug hunters .Thanx once again for all your Videos.

shekharwagh
Автор

Nice one, i really like videos concentrated on fundamentals

aminumuhammed
Автор

Hello Sir,
Can you give some tips to get valid bugs? I am trying to hunt some bugs but most of them are closing as N/A or Duplicate.

Luffy-umjo