Researcher Resources - How to become a Bug Bounty Hunter

[samhouston]

@TINU-2000 - Yep! Here are a few from our forum:

LevelUp 2017 Discussion, Peter Yaworski, Hidden in Plain Site: Disclosing Information via Your APIs

This thread is to discuss Peter’s LevelUp 2017 presentation, Hidden in Plain Site: Disclosing Information via Your APIs.

LevelUp 0x03 - API Security 101 by sadako

Abstract: “In this talk, I will be discussing the primary domains of API security, with notable examples of security flaws for each. I will also discuss some basic methodology for testing and fuzzing services, by approaching with educated guesses to how the backend actually works. Finally, I will discuss two major bugs that I was involved in finding, and the domains in which they fall under, discussing methodology and impact. I plan to have a follow up page on my website with links to resourc…

LevelUp 0x03 - Bad API, hAPI Hackers! by jr0ch17

Abstract: “Show my methodology on how I test APIs with the goal of finding bugs, either for bug bounty or even at work with a pentest.” Have a question for Jasmin? Post it here!