Offensive Bug Bounty - Hunter 2.0
A Dynamic Hands-on Course on Bug Bounty Hunting
Created by Vikash Chaudhary
About this course
Course content
62 chapters · 380 lessons · 36h 5m total1. Introduction 3 lessons
2. Recon for Bug Bounty Hunting 4 lessons
3. Advance SQL Injection 44 lessons
1. GET - Error based - strip comments_
Video
2. POST- Second Oder Injections Real treat ...
Video
3. GET - Error based - All your OR & AND be ...
Video
4. GET - Blind Based - All your OR & AND be ...
Video
5. GET - Error based - All your SPACES and ...
Video
6. GET - Blind Based - All your SPACES and ...
Video
7. GET - Error Based- All your UNION & SELE ...
Video
8. GET - Blind Based- All your UNION & SELE ...
Video
9. GET - Error Based- All your UNION & SELE ...
Video
10. GET - Blind Based- All your UNION & SELE ...
Video
11. GET -Error based- IMPIDENCE MISMATCH- Ha ...
Video
12. GET - BLIND - IMPIDENCE MISMATCH- Having ...
Video
13. GET - BLIND - IMPIDENCE MISMATCH- Having ...
Video
14. GET - Bypass custom filter adding slashe ...
Video
15. GET - Bypass AddSlashes()
Video
16. POST - Bypass AddSlashes()
Video
17. POST - Bypass Add Slashes (we dont need ...
Video
18. GET -Bypass MySQL Real Escape String
Video
19. POST - Bypass MySQL Real Escape String
Video
20. GET- Stacked Query Injection - String
Video
21. GET - Stacked Query Injection - Intiger ...
Video
22. GET - BLIND based - String - Stacked
Video
23. GET - BLIND based - Intiger - Stacked
Video
24. POST - Error based - String - Stacked
Video
25. POST - Error based - String - Stacked -B ...
Video
26. POST - Error based - String - Stacked - ...
Video
27. GET - Error based - Numeric - ORDER BY C ...
Video
28. GET - Error based - String - ORDER BY CL ...
Video
29. GET - Error based - Blind- Numeric- ORDE ...
Video
30. GET - Error based - String- Blind - ORDE ...
Video
31. GET - Error based - ORDER BY CLAUSE -num ...
Video
32. GET - Error based - ORDER BY CLAUSE-Stri ...
Video
33. GET - Blind based - ORDER BY CLAUSE -num ...
Video
34. GET - GET - Blind based - ORDER BY CLAUS ...
Video
35. GET - challenge - Union- 10 queries allo ...
Video
36. GET - challenge - Union- 14 queries allo ...
Video
37. GET - challenge - Union- 14 queries allo ...
Video
38. GET - challenge - Union- 14 queries allo ...
Video
39. GET - challenge - Double Query- 5 querie ...
Video
40. GET - challenge - Double Query- 5 querie ...
Video
41. GET - challenge - Double Query- 5 querie ...
Video
42. GET - challenge - Double Query- 5 querie ...
Video
43. GET - challenge - Blind - 130 queries al ...
Video
44. GET - challenge - Blind - 130 queries al ...
Video
4. NO RATE LIMITING 5 lessons
5. Long Password Dos Attack 5 lessons
6. Buffer Overflow 4 lessons
7. Android App Vulnerability Hunting 9 lessons
1. Background Concept
Video
2. Intercepting mobile app traffic in burpsuite
Video
3. Bypassing Android ssl pinning
Video
4. Android App Live Hunting part 1
Video
5. Android App Live Hunting part 2
Video
6. Android App Live Hunting 2
Video
7. Android App Live Hunting 3
Video
8. Accont takeover through response interception
Video
9. No rate limiting in android app
Video
8. Hostile Subdomain Takeover 8 lessons
1. Background Concept
Video
2. Hostile Subdomain Takeover Live Hunting 1
Video
3. Hostile Subdomain Takeover Live Hunting 2
Video
4. AWS S3 Bucket Takeover part 1
Video
5. AWS S3 Bucket Takeover part 2
Video
6. Hostile Subdomain Takeover Live Hunting 4
Video
7. Hostile Subdomain Takeover Live Hunting 5
Video
8. Hostile Subdomain Takeover Live Hunting 6
Video
9. Insecure Direct Object Refernce 6 lessons
10. Wordpress 9 lessons
11. Joomla 6 lessons
12. Drupal 6 lessons
13. CMS Vulnerability Hunting 4 lessons
14. Cross Site Request Forgery 7 lessons
15. HSTS 4 lessons
16. Session Fixation 4 lessons
17. Account Lockout 5 lessons
18. Server Side Request Forgery 7 lessons
19. Mobile App static code Analysis 9 lessons
1. Background Concept
Video
2. Introduction to MobsF
Video
3. Static Analysis with MobSf
Video
4. Live Static Analysis
Video
5. Static Analysis with Visual code Grepper
Video
6. Live Static Analysis
Video
7. All About AndroBug Framework
Video
8. Hunting With Qark
Video
9. Mobile App Static Analysis
Video
20. Password Reset Poisoning 4 lessons
21. Android App Dynamic Analysis 11 lessons
1. Frida & Objection
Video
2. Installation and Setting Up Frida & Objection
Video
3. SSL Pinning Bypass with Frida
Video
4. SSL Pinning Bypass with objection
Video
5. Android Anti Root Bypass with Frida & Objection
Video
6. Frida & Objection Conclusion
Video
7. Introduction to AppMon
Video
8. Android APP Tracer
Video
9. Intruding in Android APP
Video
10. All About Drozer
Video
11. Hunting with Drozer
Video
22. Blind XSS 9 lessons
1. Background Concept
Video
2. Attack Points
Video
3. Blind xss on Practice Web
Video
4. Blind xss Live Hunting 1
Video
5. Blind xss Live Hunting 2
Video
6. Multiple Blind xss Payloads Execution 1
Video
7. Multiple Blind xss Payloads Execution 2
Video
8. Blind xss Live Hunting 3
Video
9. Blind xss on DELL
Video
23. Identity Management Testing 7 lessons
1. Identity Management Testing
Video
2. Test Role Definitions 1
Video
3. Test Role Definitions 2
Video
4. Test User Registration Process
Video
5. Test Account Provisioning
Video
6. Testing for account enumeration and guessable user account
Video
7. Test for weak or unenforced username policy
Video
24. DIGGING INTO DIGITAL IMAGES EXIF Geolocation Data Not Stripped From Uploaded Im 7 lessons
25. Application Server Vulnerabilities 10 lessons
1. Introduction
Video
2. Testing for default credentials
Video
3. Testing for default content
Video
4. Dangerous http methods
Video
5. Ways to detect http methods
Video
6. Exploitation of dangerous methods
Video
7. Application Server as proxy
Video
8. Web server software bugs
Video
9. Web server software bugs 2
Video
10. Web server software bugs 3
Video
26. Cryptography Vulnerabilities Bug Hunting 10 lessons
1. Cryptography related issues
Video
2. Common Bugs in TLSSSL
Video
3. Testing for weak ssltls ciphersprotocolkeys vulnerabilities
Video
4. Checking for client renegotiation Manual Hunting
Video
5. Testing ssltls Vulnerabilities
Video
6. Testing ssltls Vulnerabilities part2
Video
7. Breach Compression Attack
Video
8. Poodle attack SSLV3 Live Hunting
Video
9. Poodle attack SSLV3 Live Hunting 2
Video
10. Why U should Hunt for Poodle Attack
Video
27. Testing for Session Management 8 lessons
1. Session Management Issues
Video
2. Bypassing Session Management Schema
Video
3. Testing for Cookies Attributes
Video
4. Cookies Attributes Live
Video
5. Testing for Exposed Session Variables
Video
6. Testing for Logout Functionality
Video
7. Testing for Session Timeout
Video
8. Session Mgmt Vuln on Password Reset or on other inj point
Video
28. Exposed Source Code Control Systems 6 lessons
1. Background Concept Must watch
Video
2. Find Source Code Control system using Burpsuite
Video
3. Find Source Code Control system using dirb
Video
4. Git Repository Dumper
Video
5. Other Types of Source Code Control System Dump
Video
6. Why Hunt and Extract Metadata of Repository
Video
29. Apache Struts RCE Hunting and Exploitation 4 lessons
30. Comprehensive Command Injection 21 lessons
1. Comprehensive Command Injection
Video
2. Steps to setup lab
Video
3. Classic regular example
Video
4. Classic (Base64) regular example
Video
5. Classic (Hex) regular example
Video
6. Classic single-quote example
Video
7. Classic double-quote example
Video
8. Classic blacklisting example
Video
9. Classic hashing example
Video
10. Classic example & Basic HTTP Authentication
Video
11. Blind regular example
Video
12. Double Blind regular example
Video
13. Eval regular example
Video
14. Eval (Base64) regular example
Video
15. Classic (JSON) regular example
Video
16. Eval (JSON) regular example
Video
17. Preg_match() regular & blind example
Video
18. Str_replace() regular example
Video
19. Create_function() regular example
Video
20. Regex for domain name validation
Video
21. Nested quotes
Video
31. Web cache deception 5 lessons
32. Server Side Includes Injection 5 lessons
33. Ticket Trick Bug Bounty 3 lessons
34. Evil way to Account Takeover 4 lessons
35. Multifactor Authentication 3 lessons
36. HTTPOXY Attack 5 lessons
37. Shellshock bash RCE 4 lessons
38. Apache http server byte range dos 3 lessons
39. Webmin unauthenticated RCE 2 lessons
40. Appweb authentication bypass 3 lessons
41. Nginx 2 lessons
42. Adobe Coldfusion Vulnerabilities 2 lessons
43. Docker RCE 4 lessons
44. Postgres RCE 3 lessons
45. Apache Spark RCE 3 lessons
46. PHPMyadmin RCE 4 lessons
47. Mysql Authentication Bypass 3 lessons
48. DNS ZONE Transfer 2 lessons
49. Flask (Jinja2) SSTI to RCE 2 lessons
50. Hadoop Vulnerabilities 6 lessons
51. GIT Shell RCE 3 lessons
52. REDIS RCE 4 lessons
53. Scrapyd RCE 3 lessons
54. Advance File Uploads 19 lessons
1. Lab Setup In Windows
Video
2. Setting Up Labs
Video
3. Upload Image by Blocking JavaScript
Video
4. Content-Type Bypass
Video
5. Suffix Blacklist Bypass
Video
6. File Parsing Rules Bypass
Video
7. Not Unified Case Of Suffix
Video
8. Blacklist Bypassing Windows Feature
Video
9. Blackist Bypassing Windows Feature More Lession 7
Video
10. Blackist Bypassing Windows Feature More Lession 8
Video
11. Blackist Bypassing Windows Feature More Lession 9
Video
12. Double Write Bypass Method
Video
13. Picture Prefix Bypass
Video
14. GetImageSize Functionality Bypass
Video
15. Php-Exif Module Bypass
Video
16. Comprehensive Picture Horse Example
Video
17. Conditional Race 1
Video
18. Conditional Race 2
Video
19. Nullbyte
Video
55. CSRF Same Site Bypass 2 lessons
56. Session Puzzling 3 lessons
57. JWT Token Attack 5 lessons
58. Email Bounce Issues 3 lessons
59. IVR Call Request Crash 2 lessons
60. Obscure Email Vulnerability 2 lessons
61. AWS Pentesting 19 lessons
1. Background Concept
Video
2. AWS Attack Vector
Video
3. Attacker Motivation
Video
4. Bucket Listing Access Permission Set to Everyone
Video
5. Bucket Listing Any AWS Authenticated User
Video
6. Leaking AWS Keys by commiting GIT REPO
Video
7. EC2 Snapshot Accesible to ALL AWS USER
Video
8. Exposed Proxy Access to Instance Metadata
Video
9. Excessive Permission are Given
Video
10. Privilege Escalation by Rollback
Video
11. Privilege Escalation Automation
Video
12. AWS Cloud Breach
Video
13. AWS EC2 SSRF
Video
14. CODEBUILD Secrets
Video
15. RCE WEB APP
Video
16. RCE WEB APP Part 2
Video
17. Input Validation Vulnerability
Video
18. Open Container Images
Video
19. SSRF to Private IP Instance MetaData
Video
Instructor
Vikash Chaudhary
Featured course instructor on CourseDen. Follow the source link above to see more of their work.
No account needed — jump straight in.
This course includes:
- 36h 5m of on-demand video
- 380 lessons
- en language
- Access on mobile and TV
- Certificate of completion