Finding Your First Bug: Business Logic Errors

Correction: at 30:55 I launched intruder to just get errors back, however, this was because my JSON payloads were not legal JSON. I had missed a comma in Intruder. Thank you to FrenchPirate83 for finding that error.

Hi everyone, welcome to the first video in my new series "Finding Your First Bug" in this series I'm going to go over some good first bugs: explain what they are, how to find them, show some examples of real bugs in the wild that paid out and finally do a practical example with Burp on a real target.

In this video, we'll be discussing Business Logic Errors, a type of bug that targets the logic of a website or app rather than the technical implementation.

0:00 - Theory: what is a business logic error/how to find them
7:09 - Case studies: 8 examples of business logic bugs by complexity
21:28 - Practical Burp: Looking at Flurry an app in scope on the Verizon Media public program

-- Case Studies --

-- You Should Also Watch --

-- Social Media --

[tayfun]

this is pure gold info for the starters like me. and it's inspiring! thank you so much for your efforts and yes we would like to see more like these videos!

[snoopysaurav]

Just getting started in this field and found your playlist for "Finding Your First Bug" this is a mine of knowledge for me.
Thanks for amazing videos.

[sarahconnorh]

Incredible content. I have done a lot of courses about web, reverse, hacking, passed certifications, but this is REAL hands-on cases! I love it ! Thanks a lot InsiderPhD <3

[tirtheshpawar]

I am going to start taking notes from your videos. This is gold..!!! god bless you.

[athtp]

I'm still get back to this awsome super informative videos ❤️

[johnb]

Thank you so Love being able to actually watch you try real stuff.

[www]

Wow, nice channel, I am just getting into bug bountys from malware lol and I can see myself watching all your videos. I see you know STOK ha, love his videos as well :)

[ricardotech]

Thanks for that well explanation Katie!

[PlentyRude]

Can’t express how beneficial these videos have been in my goal of becoming a sound hacker. This is what the hacking community is all about!

[pranavbankoti]

Absolutely loved it!!!
Got so much to learn!!
Thank you so much ❤️

[arshmansuri]

man, u r such a good teacher... I mean when I first started to read about business logic error I didn't understand a thing but after watching ur video I actually tried n got results...thank u so much for doing this amazing work I really appreciate it

[franklinramirez]

I am here for the cyber mentor recomendation, I came looking for copper and I found gold

[sergiomedeiros]

Keep up the great work man, love your videos. I’ve been doing web app pen testing before bug bounties existed and fell out of the scene now I’m getting back into it and videos like these are helpful to update me on new theories and concepts. Keep posting!

[borhangherbi]

That's the kind that I've been looking for for a long time
So far I have not found bugs because I have relied on types like xss sqli csrf And I became a little frustrated
Thank you very much we hope to see more exciting things

[keerahere]

Thanks for sharing such gold stuff! Really appreaciate your efforts :)

[ronzz]

We all know InsiderPhd scores on business logic errors. She has really explained it really well.

[dalidasaad]

your videos are so informative. thank you so much for this series :)

[ericcolt]

thank you for making these videos you are actually one of the few people how go indept on a "live" target and really go into steps..
Yes sure people use the vulnerable web app or owasp test apps but i don't really feel its the same thing because they where made buggy.

So thank you for making these video i learned allot :) !

[dhruvkandpal]

Ma'am, happy teacher's day. Love from India. :) Awesome video!

[zorfteq]

TBH this was the most helpfull video of hacking ive ever seen on youtube i knew exactly what you where doing and the explaining was outstanding thanks alot!!! ....:)