Hackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
summary
Shows concrete attacks and fixes: automated subdomain enumeration with subfinder plus masscan and nmap finds hundreds to thousands of assets (certificate transparency reveals new subdomains within five minutes); visual recon with gowitness/aquatone; content discovery with Burp, GoBuster and getrob; misuses that yield real impact including cross-origin web socket hijacking, host‑header password reset poisoning, and file API exfiltration from persistent storage; one validated report pays a $4,000 bounty after successful file exfiltration and disclosure.
AI-written summary · about
chapters (30)
- 0:00Introduction
- 1:25Overview
- 1:40Reconnaissance
- 2:45Subdomain Enumeration
- 3:15SubFinder
- 3:55Automatic Deployment
- 5:13Wildcard Search
- 6:36Port Scanning
- 9:06Visual Recon
- 11:36Looking for Content
- 12:47Burp Suite
- 15:28Go Buster
- 16:13GetRob
- 18:16Shopify
- 19:20Open Collaboration Tools
- 20:40Recap Lessons
- 21:57WebSockets
- 22:59Authentication
- 25:09The Issue
- 25:59The Solution
- 26:52Password Resets
- 27:32Host Header Authentication
- 29:44Solution
- 29:58File System API
- 31:01Sandboxing
- 31:38Crosssite scripting
- 34:19Persistent access
- 35:12API objects
- 35:54What happens when you JSON an API object
- 37:40Dont render a full object
related talks
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
39mHow to think like a hacker
30mHow to hack a web app?
46mHow to hack a node app?
46mThe Bug Hunter's Methodology 2.0
01h 01mHow hacking works - Web edition
41mLive Hacking: Breaking into Your Web App
57mEnterprise Ethical Hacking Cloud Applications