Easiest Way To Get A Critical Bug And Into A Company's Infrastructure?

Рет қаралды 13,786

5 ай бұрын

📚 Purchase my Bug Bounty Course here 👉🏼 bugbounty.nahamsec.training
💵 Support the Channel:
You can support the channel by becoming a member and get access exclusive content, behind the scenes, live hacking session and more!
☕️ Buy Me Coffee:
www.buymeacoffee.com/nahamsec
JOIN DISCORD:
discordapp.com/invite/ucCz7uh
🆓 🆓 🆓 $200 DigitalOcean Credit:
m.do.co/c/3236319b9d0b
💬 Social Media
- / nahamsec
- / nahamsec
- twitch.com/nahamsec
- / nahamsec1
#bugbounty #ethicalhacking #infosec #cybersecurity #redteam #webapp

Пікірлер: 41

@constantRic 5 ай бұрын

yes please more content of the things you enjoy talking about. Definitely breaking down these kind of process makes it really easy to understand.

@Tartaro_TP 5 ай бұрын

Naham sigue con videos profundizando en RECON, SOS el puto AMO, aprendo una banda con tu videos gracias hermano, saludos desde Madariaga!

@user-jz8vq7wo5z 5 ай бұрын

Yes really enjoy it .. waiting for great content thanks

@abhishekjain4883 5 ай бұрын

As a begineer in this feild i would like to listen more content like this and bit lengthy one alos where you give clear and deep explanation about the topic

@MarkFoudy 5 ай бұрын

thank you as always for your content!

@lol-hz9mc 5 ай бұрын

Thank you it gave me new way to look our for interesting domains.

@Loopbob4 5 ай бұрын

The best Hunter ❤ thanks man

@GilligansTravels 5 ай бұрын

cheers always informative!

@Casp1anX 5 ай бұрын

Yeah this is petty high value. Especially since it replaces the “automated bug hunting” with an intentional starting point. Definitely interested in other recon ideas you prefer

@CarlosFerreiraOfficial 2 ай бұрын

Hi sir, great content as always. A quick question. Would a pen testing certification that focus on networks and infra such as the OSCP or PNPT be useful at all for bug bounty programs? I'm asking because I see mostly mobile and web apps in scope? Thank you

@papafhill9126 5 ай бұрын

These small hands on walk-throughs are pretty invaluable. Teaching people (1) terminal usage, and (2) another way to go through the massive subs/ends list after all that fuzzing/spidering... it's just really helpful given all the things we need to learn to approaching a big system. Thank you (and more deep dive / hands on usage videos, please)!

@GhtsGameplay 5 ай бұрын

This is Good. I usually go for eyewitness and then eyeballer on it. And Dorking for any pages with registration

@bakeery 5 ай бұрын

Could you explain what you mean pl, I did not understand

@mysteriousministar2481 5 ай бұрын

Nice video bro❤❤

@0xKingSlayer 3 ай бұрын

More of this type of content please

@prakhar0x01 5 ай бұрын

Waiting for H1-305 vlog.

@elkins540 5 ай бұрын

Yes please I will like more content like this.

@PALLAB194 5 ай бұрын

Love from India ♥️

@AindriuMacGiollaEoin 5 ай бұрын

Great content

@Suniil_07 5 ай бұрын

wow!!! it's was awesome! thank you @NahamSec

@00Jimmy00 5 ай бұрын

ok but usually domains with *git*, *dev* or *sonar* are not reacable from internet so how i can access them ? when i scan with nmap i got error

@sebastianhyjek3427 5 ай бұрын

Hey Naham I have a good amount of experience with JS and HTML, I know good amount of python and java a while ago i built a few personal websites as projects but I have always wanted to get into hacking I really see myself falling inline with it. I have watched many of your videos. But I’m still not sure where to start because XSS feels a bit complicated and portswigger says to start with SQLi. What do you recommend?

@user-bn2nv5mx2g 5 ай бұрын

#Internal. For a video idea can you go over all the different types of internal assets and potential exposures/leaks ie. Jenkins, Jira, Sonar and others.