Bug Bounty Hunting
summary
Shows concrete, repeatable findings: a leaked GitHub token found in a .env file that yields repository access and a $50,000 bounty, an EXIFTool RCE where a newline in image metadata lets exiftool invoke shell and wins $420,000, and a GitLab path‑traversal via issue attachments that exposes /etc/passwd. Uses tools and platforms like exiftool, regex checks, Docker testbeds, curl for verification, and HackerOne/Integrity/GitLab for reporting; GitLab sometimes responds in 10 hours.
AI-written summary · about
chapters (11)
- 0:00Bug bounty hunting intro
- 1:05Speaker’s journey
- 4:45Ethics in bounty programs
- 8:39Learning in bug bounties
- 10:50Bounty programs explained
- 15:02Legal boundaries
- 19:18Real-world reports
- 25:18GitLab vulnerabilities deep dive
- 28:35Bounties beyond big tech
- 30:20Tools for hunters
- 31:25Q&A
related talks
42mHidden Chains: Revealing High-Impact Bugs from Bounty submissions
35mAI-Powered Bug Hunting
23mIntroduction to security research and bounty hunting on Apple's platforms
43mHow The Hack?
45mInoculating Rails Auth Against Bug Bounty Hunters
26mLife of a Bug (an insight on the GitHub bounty...
01h 01mHow hacking works - Web edition
36mGithub Actions Security Landscape