The Bug Hunter's Methodology 2.0
summary
Shows a repeatable discovery pipeline: scrape with sublister / recon-ng / enumall, brute-force subdomains with massDNS: 1m24s for a 1,136,964‑entry wordlist and gobuster as fallback, port-scan with masscan: 65k hosts in 11 minutes, screenshot with eyewitness, then prioritize by service and content. Demonstrates offensive tooling: XSS Hunter and Sleepy Puppy for blind XSS, TPLmap to exploit server‑side template injection (example: reading /etc/passwd), SSRF cheat‑sheets and common vulnerable parameter lists to guide focused fuzzing.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 2:17Resources and methodology
- 3:49Asset discovery
- 7:16Advanced recon techniques
- 10:53Subdomain brute forcing
- 13:49Port scanning
- 16:27Visual identification
- 17:44Platform identification
- 19:14Content discovery
- 21:52Parameter discovery
- 23:52XSS advancements
- 29:34Template injection
- 34:40SSRF techniques
- 37:37IDOR and command injection
- 41:17Infrastructure vulnerabilities
related talks
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
32mAutomating Web Application Bug Hunting
35mAI-Powered Bug Hunting
44mHUNT: Data Driven Web Hacking & Manual Testing
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
01h 04mServer-Side Browsing Considered Harmful
33mOffensive Javascript Techniques for Red Teamers
28mBlue Team Fundamentals