课程详情

Welcome to Recon for Bug Bounty Pentesting and Ethical HackingThis course starts with the Basics of Recon and Bug Bounty Hunting Fundamentals to Advance ExploitationThis course starts with basics with Web and Web Server Works and how it can be used in our day to day life We will also learn about DNS URL vs URN vs URI and Recon for Bug Bounties to make our base stronger and then further move on to Target Expansion Content Discovery Fuzzing CMS Identification Certificate Transparency Visual Recon GitHub Recon Custom Wordlists Mind Maps Bug Bounty Automation Bug Bounty Platforms with practicalsThis course covers All the Tools and Techniques for Penetration Testing and Bug Bounties for a better understanding of what is happening behind the hoodThe course also includes an in depth approach towards any target and increases the scope for mass hunting and successWith this course we will learn Target Selection Techniques for Host Subnet Scans and Host Discovery Content Discovery Subdomain Enumeration Horizontal and Vertical CMS Identification Fuzzing the target for finding web vulnerabilities like XSS Open Redirect SSRF SQL Injection etc How to increase the scope and take screenshots for a large number of hosts for better visualization We will also learn How to use Shodan for Bug Bounties to find critical vulnerabilities in targets We will also see GitHub Recon to find sensitive information for targets like API keys from GitHub Repositories Next we will see How to perform Automation for daily day to day tasks and easier ways to run tools We will also see How to write Bug Bounty and Pentesting Reports We will also cover mind maps by other hackers for a better approach toward any target and also we will see a mind map created by us We will also see Bug Bounty Platforms and how to kick start our journey on themHere is a more detailed breakdown of the course contentIn all the sections we will start with the fundamental principle of How the scan works and How can we perform ExploitationIn Introduction We will cover What is Web What are Web Servers DNS and We will also learn about DNS and How DNS works and also How DNS is important in our day to day life We will also see the difference between URL URN and URI We will also see the complete breakdown of the URL to understand better We will also learn about Bug Bounty Hunting and Understand the Importance of Recon in Bug Bounty Hunting and PentestingBefore starting the journey We will see Top 10 rules for Bug Bounty Hunting and we will understand the psychology of the HackersIn Shodan for Bug Bounties we will start with the installation of Shodan and we will learn about Shodan Queries such as Info Count downloads and many more and will run them from our command line We will also learn Host Enumeration Parse dataset Search Queries and Scan commands using Shodan The section cannot be completed without learning about Shodan GUI which is very simple and easily understandable We will also see Shodan Images Exploits Report generation and a lot moreIn the end we will see the summary and revision of the section to remember the important queries and key pointsWe will see live hunting with Shodan and understand the latest CVEs and perform exploits We will see Jenkins Exploitation Logs Jenkins Exploitation Credentials ADB under Shodan LIVE HuntingIn Certificate Transparency for Subdomain Enumeration we will learn about crt dot sh wildcards of crt dot sh and We will learn automation for crt dot sh to enumerate subdomains for a target We will also learn about Shodan Censys for Subdomain Enumeration We will learn about Google and Facebook Certificate Transparency We will also learn to find out Subdomains using DNS Dumpster and enumerate all the DNS records as well as save the hosts in an XLSX format We will also see the workflow for dnsdumpster to know about the whole target server from its DNS records like A CNAME MX TXT etcIn Scope Expansion we will learn about ASN Lookup Pentest tools VirusTotal We will also learn about some awesome tools like Sublister Subfinder Knockpy Asset Finder Amass Findomain Sublert Project Discovery Nmmapper and a lot more We will also understand how to use them effectively for expanding the scope to walk on a less traveled road and achieve success in bug bountiesIn DNS Enumeration for Bug Bounties we will learn and understand about DNS Dumpster DNS Goodies Altdns Massdns Vertical and Horizontal Correlation Viewdns info and enumerate the subdomains from the recursive DNSWe will start with Introduction to Fuzzing Its importance and Step by Step process We will see fuzzing practically on LAB and LIVE websites to understand better We will Learn Understand and Use tools like Wfuzz and FFUF and also see how we can perform recursive fuzzing on the target We will also perform HTTP Basic Auth Fuzz to crack the login of the dashboards and also do Login Authentication Cracking with the help of useful wordlistsWe will utilize some of the wordlists like SecLists FuzzDB Jhaddix All txt and will also see how to make our own custom wordlists for the targetsContent Discovery covers tools like Dirsearch Gobuster which will be helpful for finding out sensitive endpoints of the targets like db conf or env files which may contain the DB username and passwords Also sensitive information like periodic backups or source code and can also be identified which can lead to the compromise of the whole serverIn CMS Identification we will learn and understand about Wappalyzer Builtwith Netcraft WhatWeb Retire jsAs Banner Grabbing and identifying information about the target is the foremost step we will identify the underlying technologies which will enable us to narrow down the approach which will lead to successIn WAF Identification we will see WAF Detection with Nmap WAF Fingerprinting with Nmap WafW00f vs NmapWe will know if there are any firewalls running on the target and accordingly send our payloads to the targets and throttle our requests so we can evade them successfullyThe Mindmaps for Recon and Bug Bounty section will cover the approach and methodology towards the target for pentesting and bug bounty A strong and clear visual representation will help in performing the attack process with more clarity and will help in knowing the next stepsThe Bug Bounty Platforms section contains a Roadmap of How to start your Bug Bounty Journey on different Platforms like HackerOne Bugcrowd Integrity Synack It also covers how to Report Private RVDP ProgramsWith this course you get 24 7 support so if you have any questions you can post them in the Q and A section and we will respond to you as soon as possibleNotesThis course is created for educational purposes only and all the websites I have performed attacks on are ethically reported and fixedTesting any website that does not have a Responsible Disclosure Policy is unethical and against the law The author does not hold any responsibility

课程标签

0人关注该课程

主题相关的课程