$0 👉🏼 $1,000/Month With Bug Bounties

Hacking Full Time Blog Post:

💵 Support the Channel:
You can support the channel by becoming a member and get access exclusive content, behind the scenes, live hacking session and more!
☕️ Buy Me Coffee:

JOIN DISCORD:

🆓 🆓 🆓 $200 DigitalOcean Credit:

💬 Social Media

#bugbounty #ethicalhacking #infosec #cybersecurity #redteam #webapp

[NahamSec]

Purchase my course and learn about bug bounty hunting with over 11 hours of content, 100+ labs, and 15+ vulnerability types

[rdx]

01:15 == Mindset
- Through negativity out of the room when you are hunting, there are always bugs
- Show some Impact on the company, No impact = no value of your bug
- CTF approach

04:20 == Approach
07:34 == The right vehicle / Think before you pick a program
09:58 == Collaboration is the key
10:41 == Celebrate the Success / Enjoy the little moments

Love you Nahamsec sir ! 🙌🙌💖💖

[vsulli]

I bet you've had feed back from noobs where ppl are frustrated that they are not finding vulns, but you should emphasize that ppl who have found a bug, written it up, submitted it to the bug program, and received a 'Duplicate, ' should be praised for their progress.

Think of all the skills that went into producing just the first report.
> Recon
> Training on what to look for
> Mindset, CTF attitude of not giving up
> Investigating the vagueness of information ( digging for diamonds in dirt) tuning your bounty senses
> Hypothesis, investigation, and proof of concept
> Writing a report.

All of these things together need to be developed in concert in order to produce a report that could even qualify for a submission.
Forget about the fact that in the end it turned out to be a "Duplicate, " first time bug hunters should be proud that they are writing a turning in a report at all!!! 😍😍

[bxnny]

This is my goal. I've been studying so hard to reach it. Hope to find my first bug soon :)

[brendan]

1:50 | Looking For The Right Bugs (Mentality)

4:21 | How Will You Look For Bugs? (Automated Approach)

5:53 | (Manual Approach)

7:32 | Picking the Right Bug Bounty Programs

10:39 | Celebrate 🎉

[ultrahdgood]

00:04 Bug bounty hunting can change our lives and provide a new career path with significant financial opportunities.
01:36 Approach bug bounty hunting with a positive attitude and focus on finding vulnerabilities.
03:00 Bug bounty hunters have a relentless mindset and are always looking for solutions to problems
04:28 Choosing between manual and automated bug hunting determines your approach
05:53 Manual approach is recommended for new bug bounty hunters
07:14 Choosing the right bug bounty program is crucial
08:40 Use metrics to choose a good bug bounty program and consider the minimum bounty amount
10:03 Collaborate with others to find more vulnerabilities and make more money together.

[lucianjohr]

Thanks so so much Naham. Overwhelming for me as a beginner. But exciting and interesting. Thanks

[vsulli]

Nahamsec, regarding some hunters that are running a scan in the background and aggregating their data to find better vulnerabilities, can you talk you talk about how people setup systems that support their niche interests.

It seems like we need to double down on the TTPs (tactics, techniques, procedures) that we are familiar with and learn how to leverage those interests when summing up the impact in our vulnerability reports.

[shaunakkhosla]

where's the blog post where you talk about how to select a good BB target, also, would love to see a video on the automated method you briefly mentioned.

[bayaspirinha]

the more i learn, the more i realize i don't know anything, but it motivates me, so i dedicate more hours each day, i don't feel nowhere near ready to start doing bug bounty, but i know it will come.

[castillorafi]

honestly we can't choose between those two. So please please please do both, and if it's possible add a third video showing how you can mixte the two of them. thank you.

[socdot-xl]

You are one of the best, thnak you very much for all what you are offering to the comunity

[AnthonyMcqueen]

Large scopes is where the gold is and mix manual with automation that will make you a better hacker and focus on one vulnerability class at a time.

[chaospixxie]

Would love to see a video on using both manual and automated methods combined

[prospectchizororo]

It seems simple as you're saying when you're saying it like this, but it's intimidating out there...

[haroonrehman]

7:18 YES we want to hear from you about this, If you have made a video please update description, comment section and the, I Button (recommendation/suggestion etc).

[Gamer-zodm]

We're waiting the manual vs automated video ❤❤

[darthsidious]

hey Ben i would like to see both aproaches in order to be able to adapt to every single situation possible

[Hruthwik]

MANUAL APPRAOCH VIDEO NEEDED ASAP, THANKS

[yamizaki]

I definitely want to hear more about combining automation with manual hacking.