Bug Bounty Hunting | Deep Dive -- Part 1

Рет қаралды 28,587

Жыл бұрын

As requested by abhinav bansal!
-- Watch live at / rs0n_live
Discord - / discord
Hire Me! - ars0nsecurity.com
Watch Live! - / rs0n_live
Free Tools! - github.com/R-s0n
Connect! - / harrison-richardson-ci...

Пікірлер: 50

@edmorris4720 9 ай бұрын

are you still active rson

@rs0n_live 9 ай бұрын

I am! A new video showing what I've been working on in the last 6 months should be dropping in a few weeks. The TL/DR is this: Founded my cybersecurity research company Arson Security LLC, New Shopify Store to host educational content and host bug bounty streams for their program, and massive improvements to my framework in preparation for the Alpha launch in November. It's been a ton of work but I'm finally prepared to start doing these streams RIGHT! I honestly didn't expect to get this much of a response, so quickly, so I needed to take a step back and build out a few things I expected to build organically over a few years. Expect to see a new video from me in the next week or two!

@rs0n_live Жыл бұрын

Wow, thank you all SO MUCH for all the kind words! I'm so glad this is helpful!!! Here's a quick update on the future of my Stream/Channel. I've received hundreds of questions about my Framework, so I've decided to package it into a proper repo that can be run on Kali. From there, I will make content to help ANYONE find bounties and start learning Application Security. My goal is to lower the barrier of entry to the Application Security industry AS MUCH AS POSSIBLE. There should be NO GATEKEEPING for the security industry!! We need all the help we can get!! Again, thank you all for the kind words! It shouldn't take me more than a month or two to get my framework into a proper package. I'll keep you updated!! Cheers!!

@lokendrasingh1802 Жыл бұрын

I want 1 million subscribers for this man. Keep going sir .

@rowanlajoie2996 Жыл бұрын

Love your energy, bro! Thank you for the content! 🙌💪

@roguephilosopher2465 6 ай бұрын

Just discovered this today and this channel is awesome!

@CMDying Жыл бұрын

Glad I found your channel - Keep it up

@gamerz9129 6 ай бұрын

amzing content This is what we need thanks mate

@dukap8669 Жыл бұрын

Insane setup, insane video, insane hacker, insane knowledge sharing

@YesitdidBlazin2gunz Жыл бұрын

terrific stuff as usual

@farouksallam1779 11 ай бұрын

Great video thanks for your effort.

@danmcgirr4210 11 ай бұрын

Thanks, rs0n! This is the type of videos we need. You cover not only technical aspects but the bigger picture as well. Could you please advise me on how to follow you on other platforms and support your hard work going forward? On another note, would it be possible for you to create a series on JavaScript for hackers, using examples from the book? That'd be awesome. Sending love from down under.

@rs0n_live 9 ай бұрын

I'm so glad, thank you so much!!! And yeah, I can absolutely go through Gareth's book! I need to dig back into it, a bit, but that sounds like a lot of fun. I love everything him and James Kettle are doing over there. Cheers!

@mahdanargya6044 Жыл бұрын

i love your content bro, i just wondering about what to do after recon, like after i got all of the subdo, port, etc... whats the next step that i can do, can you make a video about it man keep going🔥🔥

@uaebikers Жыл бұрын

Excellent content. Can you please make a video about your framework? Thanks.

@heli_9 Жыл бұрын

Haven’t watched this yet but a few seconds in and your setup/ background is awesome

@rs0n_live Жыл бұрын

Thanks! And my parents said Tech Theatre classes were a waste of time... 🤣

@SportingArenafast Жыл бұрын

You are amazing. A big thanks

@SportingArenafast Жыл бұрын

could you please share the link for hacktricks

@Mr_ofcodyx Жыл бұрын

Muito bom maninhoo 😎

@rs0n_live Жыл бұрын

Obrigado! Estou feliz que você gostou!

@serialkiller8783 Жыл бұрын

after running scans and stopping server /scripts, on next time restart previous scans are persisted throughout?

@jameskjr Жыл бұрын

🔥🔥🔥

@user-vh6ui7hc3v 11 ай бұрын

nice video!

@wayvee1993 10 ай бұрын

My man just HAMMERING the mouse and keys lol. Must be good coffee! Love the video, learning a lot!

@rs0n_live 9 ай бұрын

I've never realized I did that and now I can never *not* realize it...Hahaha!! Now I'm going to be trying to add a rhythm to it...

@wayvee1993 9 ай бұрын

@@rs0n_live I think everyone does it to some extent, especially when you're super into what you're working on. Glad you're back, your videos are super informative.

@bitcoit7527 Жыл бұрын

I am from India and 3 rd year engineering what could I do for learned finding bug 👾 in website and what book resources I followed to learning finding bugs and all😊

@esoochannel3864 Жыл бұрын

What is the name for the frame work that you using

@rs0n_live Жыл бұрын

That's actually a framework I built. You can find the Web App here: github.com/R-s0n/WAPT_Framework And the automation scripts here: github.com/R-s0n/Wildfire-Toolkit

@firos5381 Жыл бұрын

can you help beginer to start where recomend any course to follow

@combatreis5350 Жыл бұрын

❤❤

@abdulx01 9 ай бұрын

How do you get automatically object in console, please tell me.

@rs0n_live 9 ай бұрын

Apologies, I'm not sure what you are asking. Can you be more specific?

@abdulx01 9 ай бұрын

I saw 1:04:07 some object and property are showing of current page right.... it's by any extension or customised setting.

@danc5790 7 ай бұрын

When’s the next live?

@danc5790 7 ай бұрын

On the weekend that is, I’m from UK and weekday streams are too late for me unfortunately

@williamselbystudent1564 Жыл бұрын

How is this considered "deep dive" . This is just snooping around lol . If you're going to deep dive, then DEEEPPP DIIIVVEEE :O

@chihoangcao6622 Жыл бұрын

looking for part 2

@rs0n_live Жыл бұрын

I'm hoping to stream Part 2 on Saturday morning! :)

@mdashifuzzamanshawon Жыл бұрын

Thank you bro... waiting for up coming parts...

@chihoangcao6622 Жыл бұрын

can you deep dive into HTTP REQUEST SMUGGLING?

@rs0n_live Жыл бұрын

Definitely!! That's a rough one but we can get through it.

@BugBounty4u 7 ай бұрын

love From Pakistan Rson

@user-kk3fb5xx3j Жыл бұрын

Too much time to analyze one subdomain.If we have hundreds of subdomains - it doesn't work

@rs0n_live 9 ай бұрын

I completely agree! The purpose of this tool is to lower the barrier of entry to Bug Bounties, which will hopefully lead to more skilled Application Security engineers in the job market and ultimately help bridge the skills gap that's out there. If you're looking to maximize profits through automated scanning, my framework is definitely not the tool for you. I recommend github.com/tomnomnom/meg !