[Part III] Bug Bounty Hunting for IDORs & Access Controls

NOTE: rs0n is no longer actively bug hunting. Any future content on this channel will be focused on defensive Application Security concepts designed to help security teams protect against attackers. Information about the "Why?" behind this decision can be found in his LinkedIn post here:   / urn:li:activity:7457414267240292352   He wishes everyone the best of luck on their journey!

[Part I] Bug Bounty Hunting for IDORs and Access Control Violations
▶︎

[Part I] Bug Bounty Hunting for IDORs and Access Control Violations

Methodology for Bug Bounty Hunters to move from Recon to Manual Testing (FREE Members-Only Video)
▶︎

Methodology for Bug Bounty Hunters to move from Recon to Manual Testing (FREE Members-Only Video)

This livestream is designed to help you find your first bug!!
▶︎

This livestream is designed to help you find your first bug!!

Bug Bounty Hunting for Client-Side Injection Vulnerabilities | Part I
▶︎

Bug Bounty Hunting for Client-Side Injection Vulnerabilities | Part I

The X-Correlation between Frans & RCE - Research Drop (Ep. 86)
▶︎

The X-Correlation between Frans & RCE - Research Drop (Ep. 86)

My Full Bug Bounty Recon Methodology Using My Bug Bounty Hunting Framework | Beta Launch @ DEFCON 33
▶︎

My Full Bug Bounty Recon Methodology Using My Bug Bounty Hunting Framework | Beta Launch @ DEFCON 33

Free Recon Course and Methodology For Bug Bounty Hunters
▶︎

Free Recon Course and Methodology For Bug Bounty Hunters

Three Common OAuth Misconfigurations That Lead to Account Takeover (Bug Bounty Reports)
▶︎

Three Common OAuth Misconfigurations That Lead to Account Takeover (Bug Bounty Reports)

IAM Explained - Beginner Fundamentals Workshop
▶︎

IAM Explained - Beginner Fundamentals Workshop

The Bug Hunter's Methodology - Application Analysis | Jason Haddix
▶︎

The Bug Hunter's Methodology - Application Analysis | Jason Haddix

Still not found your first bug? Try IDORs
▶︎

Still not found your first bug? Try IDORs

"Easiest" Beginner Bugs? Access Control and IDORs
▶︎

"Easiest" Beginner Bugs? Access Control and IDORs

Live Recon and Automation on Shopify's Bug Bounty Program with @TomNomNomDotCom
▶︎

Live Recon and Automation on Shopify's Bug Bounty Program with @TomNomNomDotCom

Bug Bounty bootcamp // Get paid to hack websites like Uber, PayPal, TikTok and more
▶︎

Bug Bounty bootcamp // Get paid to hack websites like Uber, PayPal, TikTok and more

Bug Bounty Hunting | Using Burpsuite's Match & Replace Rules to Find IDORS and Break Applications
▶︎

Bug Bounty Hunting | Using Burpsuite's Match & Replace Rules to Find IDORS and Break Applications

The Bug Hunter's Methodology Full 2-hour Training by Jason Haddix
▶︎

The Bug Hunter's Methodology Full 2-hour Training by Jason Haddix

Hunting for IDORs with Katie Paxton-Fear
▶︎

Hunting for IDORs with Katie Paxton-Fear

Broken Access Control | Complete Guide
▶︎

Broken Access Control | Complete Guide

Everything You Need To Know About Burp Suite For Bug Bounty Hunting!
▶︎

Everything You Need To Know About Burp Suite For Bug Bounty Hunting!

Live Bug Bounty Recon (Raw Stream) | HackerOne Public Program - Hilton
▶︎

Live Bug Bounty Recon (Raw Stream) | HackerOne Public Program - Hilton