Log-2

Oct 1, 2021 - Nov 1, 2021

Summary

The first 2 weeks were dedicated to solving the Dante lab and completed it but now had some dilemma with what to do next and then decided to practice the rest of free HTB challenges and machines in a kind of preparation for Synack Technical Assessment and send the mail/application in mid-November.

Read upon 2 more Research papers and watched talks and presentations related to them. Got an opportunity to work as a Research Intern which will start from December, will try to do some groundwork on it before starting, Will keep posted or make blogs related to it unless it's not allowed.

I tried to setup frameworks and tools to organize work, scope and getting checklists ready in Obsidian but they were not working out, most of them were either too broad and were just useless for some programs or have nothing to do with programs I wanted to work on. They were mostly tailored to their Creators. I realized I have to do my own Trial and Error to work things out myself.

Do not trust Twitter and LinkedIN #BugBountyTips

I never realized choosing a Bug Bounty program would be this confusing and time taking as I have no specialty of bugs I hunt on. A lot of Twitter/LinkedIN gurus never tell you this stuff (coz most of them are fake and only post to sell their courses).

A lot of the #BugBountyTips that they post are Out of Scope in majority of the Programs if not all. So do not get excited that this is easy money when you see these posts or discouraged when you are not able to find these bugs.

I would rather suggest you to look into InsiderPhD's Youtube Channel which is a gold mine among a lot of this Trashy noise.

Takeaways

• Get organized and start BB in full commitment

• Try to look into more research during the opportunity

• Try to be on your toes by participating in atleast 1 CTF per week

Catenate

Readings

• Vickie Li Bug Bounty Boot-camp / Real-World Bug Hunting (Good Books)

• Practical Malware Analysis: The Hands-On Guide to dissecting Malicious Software

• Buffer Overflow Guides

  • https://github.com/johnjhacking/Buffer-Overflow-Guide

  • https://github.com/gh0x0st/Buffer_Overflow

Videos

• Insider PhD

• Impact in Software Engineering Research

Practice

• https://app.hackthebox.com/tracks/Synack-Red-Team-Track

• https://portswigger.net/web-security/all-labs