Bug Bounty 2022 Guide: Where to focus // How to make money // How to get started today

Рет қаралды 248,472

Күн бұрын

Is there a future for you in Bug Bounty? Can you make money out of buy bounty? Is this a full time or part time job? STÖK answers these questions and many more :)
Real answers to real world questions. Are you too young? Are you too young? Can you make lots of money in bug bounty? Is it a full time or part time job?
// MENU //
00:00 ▶️ Introduction
00:42 ▶️ Who is Stök?
02:09 ▶️ Stök's Career Journey
05:09 ▶️ How Stök got into in Bug Bounty
10:46 ▶️ What is a Race Condition and BURP?
14:26 ▶️ What is Bug Bounty?
16:30 ▶️ Hacking within scope
19:36 ▶️ Is Bug Bounty a Full-Time Job?
25:07 ▶️ Stök and Truesec
26:26 ▶️ Tips For Teenagers To Do Bug Bounty
33:50 ▶️ "Teenagers Will Do Better Than You"
34:54 ▶️ Basic Skills, Knowledge and Tips for Bug Bounty
38:40 ▶️ Guide To Starting Bug Bounty
46:00 ▶️ How To Network
48:57 ▶️ The Negatives of Bug Bounty
52:25 ▶️ Is Bug Bounty For Young People
53:50 ▶️ Advice For Young People
57:46 ▶️ Is Bug Bounty for "Older" People
01:02:10 ▶️ Learn OWASP Top 10 Vulnerable Classes
01:03:38 ▶️ The Future: Make sure you understand Web3, Blockchain and NFTs
// Connect with David //
Discord: / discord
Twitter: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
KZfaq: / davidbombal
// Connect with STÖK //
Twitter: / stokfredrik
KZfaq: / stokfredrik
Instagram: / stokfredrik
LinkedIn: / fredrikalexandersson
Twitch: / stokfredrik
Website: www.stokfredrik.com/
Truesec: www.truesec.com/
If I missed something, please comment below and I'll update this list.
// Videos and people mentioned //
Top 5 tips to get started in Bug Bounty: • HOW TO GET STARTED IN ...
Network Chuck interview: • Bug Bounty (how to mak...
Frans Rosén: / fransrosen
Jason Haddix: / jhaddix
Ben Sadeghipour (Nahamsec): / nahamsec
Adam Langley: / adamtlangley
// Companies & organizations mentioned //
HackerOne: www.hackerone.com/
Bugcrowd: www.bugcrowd.com/
Intigriti: www.intigriti.com/
CTF Challenge: ctfchallenge.com/
HTB: davidbombal.wiki/htb
THM: tryhackme.com/
// MY STUFF //
Monitor: amzn.to/3yyF74Y
More stuff: www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
#bug bounty
#bugbounty
#hackerone
#hacking
#cyber
#security
#bug bounties
#ethical hacking
#bug bounty hunting
#burp suite
#ethical hacker
#pentest certificate
#red teaming
#bug bounty tips
#bug bounty for beginners
#bug bounty course
#pentest basics
#bugcrowd
#bugbounty
#stök
#stok
#hack
#bugs
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#bugbounty #hackerone #hack

Пікірлер: 322

@satyajeetghorpade7975 2 жыл бұрын

Teaching hacking for free is really a good thing for those who cannot afford to pay for it. Really good work by David and Network Chuck

@davidbombal 2 жыл бұрын

Sharing is caring 😀

@imt3206 2 жыл бұрын

No. Teaching anything for free is like printing money without goods and services to back it. Sooner than later, you’ll find yourself with inflation. In other words, you’ll end up with a surplus of “educated” people for the job market, dropping wages considerably down . So, no. Free education is not good. It’s a fallacy used by, usually, politicians.

@brianrono9629 2 жыл бұрын

@@imt3206 I wonder how many people commit to learning.

@lukeempty3386 2 жыл бұрын

@@imt3206 Have you ever studied something in depth. Watching KZfaq videos doesn't help with it much at all. They are useful to grasp concepts and then continue. That's about it. It's not like people are getting degrees from KZfaq videos. What jobs are you thinking people are entering from KZfaq videos alone exactly and what education bodies are being skipped?

@imt3206 2 жыл бұрын

@@brianrono9629 you’d be surprised by the consequences

@jimmygunnz5651 Жыл бұрын

I needed to hear and see this interview. I can't thank you both enough. Im here in America. Im 33 and Im a black male. I've been truck driving the past 4/5 years. Truck driving has change my life and I was able to get a house for me and my children with my wife but now its time for me to follow my passion and to take a step forward into tech specifically sec and networking

@marlinshanklin-ww7em 6 ай бұрын

Good luck I'm ready to get out of trucking also.

@MrTonyDAnzaa 4 ай бұрын

Hey man, I am curious how things turned out for you? I am in a similar position, I'm 33, i have been a mechanic for years and I decided to make a change as well. I couldn't agree more, this video, did make make me feel a little old to start, but it left me feeling hopeful!

@melantheoszimurri9981 2 ай бұрын

I’m 41 black male truck driver. On the same journey

@cv2010u 2 жыл бұрын

“Everyone is always hiring if you show up to do the work” excellent quote.

@georgiossakellaridis2608 Жыл бұрын

far away from truth though..

@general4601 11 ай бұрын

@@georgiossakellaridis2608 why?

@georgiossakellaridis2608 11 ай бұрын

@@general4601 Junior level positions are very few in general. If you have no exp its quite hard to get hired. Too much supply but little demand.

@general4601 11 ай бұрын

@@georgiossakellaridis2608 in the EU there are a lot of junior level positions. Idk what you are talking about dude

@georgiossakellaridis2608 11 ай бұрын

@@general4601 ok..

@aravbudhiraja 2 жыл бұрын

"Age is just a no." My first bug was in the university of cambridge and I've even found one in a fortune 500 company :) However, young ppl don't pay attention to the basics - networking, programming, linux, cryptography. They straight up jump to pentesting. You can't protect/attack something without knowing how it works.

@iamwithyou1184 2 жыл бұрын

Bro can I get your Instagram I'd

@imt3206 2 жыл бұрын

How did you manage to get accepted into Cambridge?

@aravbudhiraja 2 жыл бұрын

@@imt3206 i didn't get accepted into cambridge...they hv an rvdp and i reported a bug and they gave me a letter of appreciation

@lukeempty3386 2 жыл бұрын

Literally every large learning resource I've found starts and recommends Linux, programming and networking as starting points. So not entirely sure if that's accurate at all

@epicotakugamer4930 Жыл бұрын

Where's the CompTIA A+ at??

@THE.MICHAEL.ANGELO 2 жыл бұрын

The fact that STÖK absolutely LOVES sharing his knowledge with us all to grow and become better people is MAGIC!!! He's so encouraging, enthusiastic, energetic and excited about dropping knowledge and gems to the world! The one that won me big time about his outlook on the age was his answer, "...as long as you are passionate about it!" Thank you STÖK!!!!!

@prajwalpant 2 жыл бұрын

the one thing i picked from this video is that you don't need to learn about every bug types before starting bug bounty . First learn about one type of bugs the find it on real target then move on to the next type

@hutchgambles Жыл бұрын

Man, I wanna go for a beer with STÖK. He seems like such a cool, likeable guy.

@davidbombal Жыл бұрын

He's an amazing guy!

@hutchgambles Жыл бұрын

@@davidbombal so are you David. Your channel has introduced me to so many cool/interesting people and inspired me to learn with the goal of changing careers. Thanks for everything.

@NemoScene Жыл бұрын

STÖK is very wise and articulate. I love this content/format and I love how David is asking great questions by empathizing with the viewers. Great content for people like me who are just starting out!

@superkool7 2 жыл бұрын

Absolutely love both of these guys. And I love when people I love do collabs! Right on! Thanks for the awesome advice and content, truly. It really means a lot to those of us who are just starting out. We look at you guys like legends, so it means a lot to see you both giving back so much. Thanks again!!

@ericecklund676 2 жыл бұрын

Stök mentioned the Peter Yaworski book, "Real World Bug Hunting". and that's a really good one to have open when you're trying to understand this content. Really great video.

@Knights0fBlood Жыл бұрын

this interview helped ALOT, started out in ITsupport role 8 years ago, worked that for 5years decided to go to school, I'm about to finish my Sys Admin degree after working a job now that uses it, been doing Support/Sys Admin role for the past 3 years now, and recently had a class about Ethical hacking and security, which made me want to continue my education in the Cyber Security side of things and I LOVE it.

@davidadams5757 2 жыл бұрын

I've been hoping to get a job at Truesec and I've been watching all their videos and Stök is the man. Having you both in one youtube video is something I had to click on. I think I'll try some bug bounties while I wait to join the team.

@GeekyGizmo007 2 жыл бұрын

This was a really solid chat and the guest is a pleasure to listen to. Reminds me a lot of my outlook.

@skizz_ Жыл бұрын

Really fun interview. I love the more casual and smiley David. Keep them coming!

@dawnS33ker 2 жыл бұрын

Sir, these are the type of videos we learners need. Thank you

@tracyracy 2 жыл бұрын

It's never too late as long as you're alive. This was a great watch. Can't believe I watched it in a single sitting

@lfcbpro Жыл бұрын

David is such a good interviewer, he really lets the person speak, doesn't feel the need to interrupt and only asks questions when he finds the person says something interesting he would like expanded on. People on TV could take some tips from him for a real satisfying 1 hour interview with the PERSON, not the interviewers points of view. Keep up the fantastic work David.

@rxtechandtrading 11 ай бұрын

do you get paid to write this senseless dribble on David's behalf-watch his interviews with "occupy the web" and see how often he interrupts the guy. Nonetheless his channel is otherwise very informative, helps you do you research and move in the right direction

@lfcbpro 11 ай бұрын

@@rxtechandtrading thanks for your contribution, I am sure that was worth your effort, move along :)))

@rxtechandtrading 11 ай бұрын

@@lfcbpro move along to where? is this some type of contemporary slang i am supposed to be familiar with-lol

@HaitasDaniel 4 ай бұрын

u guys share such a good vibe ! I think ill come back later to rewatch it to gain more enthusiasm.

@dustinhxc Жыл бұрын

You always have the best guests and topics! Love this! So excited to try more out. Going to watch his videos too now. Keep up the excellent hacking content and free information for the people!

@RYDERSEC 5 ай бұрын

Stok's words really resonated with me. Thanks for this video David!

@peracasian9195 2 жыл бұрын

This was a great one David, thank you :)

@dragonsage6909 2 жыл бұрын

Wow, you're knocking it outta the park lately. Another stellar guest, this guy was fantastic! Learning tons, thank you!

@adewale5782 2 жыл бұрын

This is a great guidance. Good work David. Stok!!!! Cheers to you

@jamesdietsch7868 2 жыл бұрын

Thanks David, this was a great interview! :)

@siddharthchhetry4218 2 жыл бұрын

Because of Stok i came to know about bug bounty last year . I am very grateful to him for Uploading such contents.

@hiteshverma8728 Жыл бұрын

these both guys are really great teachers in this world.🙌🙌

@theimperious1 2 жыл бұрын

this is a really good video! followed stok as well. great vibes and good info! very encouraging.

@Noonganoongas 5 ай бұрын

The most helpful cybersec channel on KZfaq. Always asking the right questions.

@lifebyvikk6751 Жыл бұрын

IT student From Kenya, this Helped to make a decision,I've always liked this part of cybersecurity and I'm going all in. Thanks David!

@atighoudiallo9803 Жыл бұрын

Hi David I really appreciate what you did and continue to do for us. Your videos are very very very interesting.

@jonmagee1778 2 жыл бұрын

David Bombal you are incredible at interviewing people. A master. Always keeps me coming back.

@davidbombal 2 жыл бұрын

Thank you very much!

@glock463 Жыл бұрын

appreciate this dude for asking the exact right questions for a 16 year old teenager as myself. hopefully i can look back at this comment in 6-8 months and be able to say i can do whatever i put my mind to.

@cesarsanchez1275 2 жыл бұрын

You are the best ! David and Stok are doing a great work for the community !

@EdwardLittlefield 2 жыл бұрын

Stök - ADHD @ 44. I totally understand the revelation. I was 50. :)

@XEQUTE Жыл бұрын

love it , I never see shows, but this one I could just listen.

@MyDancingirl 6 ай бұрын

Great interview questions🙋🏽‍♀️ 39:10. So many gems 💎

@madjedsolt5878 2 жыл бұрын

As always great content. Thanks to these two great people and to chuck too. Greetings from Algeria.

@roopsagarteella 3 ай бұрын

This guy(David) exactly asks the questions that were in mind.

@indiecent7594 2 жыл бұрын

One of my favourite David Bombal videos!

@RomeoYong 2 жыл бұрын

Really great video... STÖK has a great personality... good stuff

@RyanJonkerCyber 2 жыл бұрын

Great info, great interview, great format, great clarifying questions... just excellent

@doc_ineeda_win5834 2 жыл бұрын

So glad to see stok on , follow both of you so great interview

@davidbombal 2 жыл бұрын

Thank you n j!

@danpadro8883 2 жыл бұрын

This video brought me back from ebb to flow state. 🙏

@abovethehorizon2023 2 жыл бұрын

Just the content I was looking for and thinking a lot about lately. Thank you David.

@cod4volume Жыл бұрын

Sometimes I watch your stuff a bit. Thank you for the content.

@hack_the_track4942 2 жыл бұрын

Thank you so much david ❣love you 3000!

@_mythospheric7684 2 жыл бұрын

Thank you sir for another interview . ❤️

@taraurbanovitch2686 Жыл бұрын

Thank you David, this was great. I’m beginning to realize I already have a good foundation to pursue this. I’ve been a system administrator and I can completely understand the mindset needed.

@thautran3442 2 жыл бұрын

Great content. Thank you so much!

@Yacine-dz8528 3 ай бұрын

thnk u very much for booth of you what ur doing is great and again David thank u very much

@sifutenzsako2701 2 жыл бұрын

I really missed hearing Stok talk. I know hes been busying and all. Him and Neil Bridges really motiviated me to dive in. Thank David for having him and thank you Stok for speaking.

@ReQuiem_2099 2 жыл бұрын

Hah! I love this guy! Always great guests David!

@davidbombal 2 жыл бұрын

Thank you!

@mlsandreas 2 жыл бұрын

Thank you David , great interview!!

@davidbombal 2 жыл бұрын

Thank you Andreas!

@intriga.realmedia 2 жыл бұрын

I'm just starting on bug bounty, and yeah, Burp Suite is THE tool for it.

@firozahmmed123 2 жыл бұрын

Thanks a lot. I was thinking about this career. Learned many things.

@CloudContext 2 жыл бұрын

Love your story STÖK. Very similar background to mine.

@EnigmaticRapper 2 жыл бұрын

Great video. I actually just started an experiment to see if I can become a successful bug bounty hunter starting from Zero. I'm going to document the journey on my vLog channel "along with my Vegas vlogging" but this should be fun. And I'm retired, age 60, so I have plenty of time to fiddle around and learn this. Beats sitting on couch watching TV all day. LOL. I'll have to checkout STOK's channel now.

@mdashifuzzamanshawon 2 жыл бұрын

Awesome it is so much informative for all .... Thank you so much

@Mags0O7 Жыл бұрын

On my way to to the vending machine :) thank you it was an awesome talk

@psynamessynames2272 2 жыл бұрын

heeeey, once again here is DB with anaother great video. Hacking/Bug bounty is the direction am interested in so much right now. am a Civil Engr by prof. switching sides. i love code. am teaching myself I.T from your course on Udemy, and prog langs: C,C++,C# and Python. nice cource by the way. then will head in the hacking/bug bounty field. looking forward to more of ur great videos, they inspire, u insipre. Love from Malawi

@golfchanl 2 жыл бұрын

This was great, thank you.

@digamberdeshmukh974 2 жыл бұрын

Wow very interesting session by both of you .... Thank you

@ananth2527 2 жыл бұрын

Excellent content David

@AdHdEntertainmentLLC 2 жыл бұрын

9I've been a fan of your content which has provided me with much educational advice but you got my man STOK!!! So excited for this video. (posted before starting video)

@davidbombal 2 жыл бұрын

Hope you enjoy the video :)

@AdHdEntertainmentLLC 2 жыл бұрын

@@davidbombal always

@STOKfredrik 2 жыл бұрын

❤️🙏✌️

@MaggieMckan 2 жыл бұрын

Thank you sir David u have inspired me in this field

@smritinanda4981 2 жыл бұрын

He also inspired me but in something else, that is Never gonna give you up Never gonna let you down Never gonna run around and, desert you Never gonna make you cry Never gonna say goodbye Never gonna tell a lie and hurt you Rickrolling, I almost lost hope in rickrolling, he inspired me to rickroll again and... I rickrolled 10k ppl at the same time in a community server in discord

@-------------------------theVM Жыл бұрын

You are appreciated and every single video you make is a plethora of context that I have needed to decipher decades of rabbit holes! You are making this journey back to the "dark side"... exhilarating! Ha!

@Blackzero1z Жыл бұрын

thank you, this was great

@paulojr1384 Жыл бұрын

Nice interview!!!

@KirwinWebb 2 жыл бұрын

That ad right at 34:23 was perfectly timed.

@katlegobopape9760 2 жыл бұрын

St😎k is one of the coolest guest you've interviewed. ✌ great video 👌

@davidbombal 2 жыл бұрын

Glad you think so Katlego! He is great!

@ritaarellano6965 Жыл бұрын

Awesome interview 🎉

@ashishandhavarapu8779 2 жыл бұрын

Thanks for posting this video david 💙

@davidbombal 2 жыл бұрын

You're welcome!

@kratos-sf1os 2 жыл бұрын

Thanks for this ❤ Love from 🇮🇳India

@MFoster392 Жыл бұрын

Another awesome video, the tech industry is so big for new people its so helpful to hear where these experts recommend we start

@bernhard8540 Жыл бұрын

I'm only 35 but I have always been a hardware hacker since before I knew it had a name haha I can remember having to scroll through the floppy disks to play a super simple game with an old joystick and one or two button at the base haha I still have my attributes 2600 along with every other console up to date .. haha i cant let them go and they all run great .. ive been slowly dipping more and more into the software side because now I build things and cobble some code together to make it work instead of having a fine tuned program for it thst would be clean and I've been loving the content, always been a fan but I don't really comment much I lurk while I tinker haha ♥️

@jeffyramalhocardioworkouts 2 жыл бұрын

I am almost 30 doing a psychology degree and I thought that I was too old to start learning hacking, thanks guys for sharing this info, made me feel included and more motivated ❤️

@jeffyramalhocardioworkouts 2 жыл бұрын

@さくらしゃ that’s why I love this community 😃🤩

@rxtechandtrading Жыл бұрын

here's some advice I think you should take-don't bother with Hacking unless you've been in IT for many Many years-Theres A TON of stuff u need to know-from server infrastructures-string vulnerabilities in code-6 or more different programming languages-Linux shell privilege shell escalation-windows privilege escalation-data base hacking-sql injections-how a DDOS works-packet interpretations at various OSI levels -the list goes on and on-plus YOU WILL BE COMPETEING AGAINST GUYS LIKE ME! I have been doing this for over 2 decades and im good-i mean really good, and there are just Sooooooo many guys out there that just blow me out of the water..Pick something else-seriously!

@general4601 11 ай бұрын

@@rxtechandtrading dude wtf 😂

@rxtechandtrading 11 ай бұрын

@@general4601 im just being honest DUDE!!-would you prefer I BS the guy??

@rdx8122 Жыл бұрын

David predicted the future 😂😂 18:24

@KeithGriffiths 2 жыл бұрын

Great points in this video.

@TVRusun Жыл бұрын

nice sharing

@niclorenzo1274 2 жыл бұрын

Great content!

@youssefmounib6886 2 жыл бұрын

Thank you #David so much you us with that , I learn from that a lots of stuff ❤️❤️❤️

@techsahabi1725 2 жыл бұрын

Another awesome interview....Thanks to both of you...I am in my 30 and started my cyber sec journey from 2022....I learned many things from both of you...#Happy Hacking

@ehcankur 2 жыл бұрын

My favourite thing , Bug Bounty ❣️🔥

@davidbombal 2 жыл бұрын

Hope you enjoy the video!

@ehcankur 2 жыл бұрын

@@davidbombal yes sir super one ..

@Romanslost 2 жыл бұрын

Love STÖK such an awesome Collab

@davidbombal 2 жыл бұрын

Thank you! STÖK is great!

@Black-Belt-Developers 5 ай бұрын

cool man, love it !

@a.g.4843 5 ай бұрын

Clever guy…i also work part time (32 h) and do both. But in my main job there isn’t much to do, so i can work on bounty hunting also there….

@shahabrao8995 Жыл бұрын

thanks stok its really matters alot to me

@OthmanAlikhan Жыл бұрын

Thanks for the video =)

@bhaveshmishra6998 2 жыл бұрын

As always good quality content sir !

@samislam2746 2 жыл бұрын

I know this guy, I watched him on hack one 3 years ago, what a surprise

@user-ml9tt4fk5i Жыл бұрын

David is my love youtuber and Stok is my love Bug bountry hunter!!!

@refaiabdeen5943 Жыл бұрын

Cheers Mate.

@poketcg1592 2 жыл бұрын

If I was into hacking at 16, I'd do this for free if I couldn't get paid for being underaged. The experience is well worth it on its own, it's real life experience and looks great on a resume + verifiable.