3 Real API Bugs I got a bounty for

This is a series of mildly Halloween-themed hacking stories for October. I'm going to walk you through my most unimpressive, easy, and straightforward vulnerabilities as I tell three stories of real bugs in real production systems. In this video, we take a look at some API flaws. I've (obviously) had to omit a lot of details, even though these bugs are resolved, sometimes clients worry about disclosing, so no permission = no details on client names, programs, platforms or anything else, all screenshots are taken from unrelated and mildly similar products. ANYWAY, I hope you enjoy the slightly shorter videos.

[jubbs]

I'm only here for the cute animated Katie avatar! 🤩
Seriously, though: thanks for sharing your hacking stories with us.

[fokyewtoob]

Katie I just want you to know your videos helped me find my first bug a few weeks ago and I got paid $5k after that my life is changed I know I can actually make money doing this thank you so much and God bless you for real

[ramkumar-lcst]

I immensely benefit from your videos!! I have a question? Is there age factor for Bugbounty i m in mid 30s, , can i be successful if i work Hard at this age!! Already got basics!!

[harshraj]

Thank you katie your videos are really helpful for us please make full video on READ THE DOCS .

[camelotenglishtuition]

Thanks for giving back to the community

[iosifcastrucci-ov]

Love your videos ! I’ve a simple question, in your opinion for someone( like me, 32 old) wants to start hacking in 2024 ( bug hunting ), a learning path ?

[amoh]

Thank you katie im beginner im focus on xss csrf & blind xss any any advice give me to help me level up my skills thank you alot

[CyberAbyss]

Thank you! 🙂 I'll need to go back and find your other GraphQL videos.

[superfish]

Not sure if intentional or not but you are leaking the target you against for the 1st bug in one of your screenshots.

[gemx]

I cannot understand the csp bypasses and dangling payloads in xss can you recommend resources and labs

[jxkz]

Can you give me road map to become bug bounty hunter

[pratiksubedi]

I am really interested in finding How did you cause the error in the first part??

[shashikiran]

Katie Am Expecting How To Find Waf Bypass Xsa Businesses P1 Bug's like. Account Takeover, SQL INJECTION

[MFoster]

Great video thank you these really do help :)

[AhmedSamir-tyvo]

what did you do to cause an error in the GraphQL bug ?

[مطبخمنى-رط]

أستمر اتمنى لك التوفيق والنجاح أنا صديقه جديده في انتظارك احلى لايك