Original subtitles

Hello guys, welcome to this course of recon for bug bounty hunters and penetration testers.

So this course is fully focused on like reconnaissance on reconnaissance for bug bounty hunters and

penetration testers. So let's hunt for bug not for bounty. If you find bugs then automatically

you will get bounty. So don't run behind bounty run behind bugs. Okay. So I am Vivek Pandit,

a bug bounty hunter, blogger, website developer and ethical hacker. I have founded more than

500 bugs in various websites at HackerOne, Bugcrowd and some private programs. I have founded most

of the bugs in the recon phase. That's why I am bringing this course to share my skills

with you all so you can also find more bugs. So I invite you to take this course to upscale

your career in cybersecurity. bug bounty hunting and penetration testing. Okay, so let's get

a quick overview of course curriculum.

So we will start with the introduction that we are doing right now and then we will go

to subdomain enumeration from tools and then we are going to enumerate subdomains from websites

and after that after enumeration of that subdomains we are going to filter that subdomains like

we are going to filter only live domains. Okay, that the domains that are giving response.

Okay, so in the fifth section, we are going to extract. URLs from internet from for a specific

website and then in the section 6 we are going to find parameters from that URL or use some

tools for that and we are also going to like brute force for parameters. So we will get

some parameters that are not on internet also. Then after that we are going to sort those

URLs and then we are going to use a tool. for automation for replacing parameters with payloads.

Okay, so it can like replace 1000 of like parameters with payloads. Okay. And then after that, we

are going to footprint a website using many different techniques and tools. So in the 11th

section, we are going to learn how to use browser add ons for recon and in the 12th section,

we are going to learn how to identify the WAF means web application And then we are also

going to look for subdomain takeover vulnerabilities. And we are in the 14th section, we are going

to like increase our scope of bug bounty by doing fuzzing or content discovery. In the

15th section, we are going to put do a port scan and the 16th section, we are going to

do fast port scanning. And in the 17th section, we are going to visually record for. vulnerabilities

in websites and this is the 18 section. It is the most important section according to me

because Google dorking is a very critical part of any reconnaissance process. So I have explained

everything about Google dorking every like every single thing. Okay. And in the 19 section,

we are going to implement our theory into practical and find various vulnerabilities in various

websites. And then We are going to like I'm going to give you some tips like three tips

on finding like advanced Google darking and then we are going to like do a full class on

showdown darking and in the twenty third section we are going to like use that knowledge and

dark like you showdown darking in practically and in the twenty third section we are going

to. you should on in our command line or in our terminal. Okay. And in the 24th section,

we are going to use github darking and find sensitive information for a specific website.

Okay. And in the 25th section, I'm going to show you like some advanced vulnerability scanners

that are used by bounty hunters and penetration testers for finding vulnerabilities in websites.

Okay. In the 26th section, I'm going to show you. how to use Metasploit framework in our

recon process. In the 27th section, I'm going to show you how to enumerate version of port

using like Metasploit and in the 26th and 28th section, I have shared like 1000 of payloads

that I have used like for finding so many bugs. Okay. And I will also share my own personal

folder where I have stored all the like payloads. Okay. And in 29 section, I am going to like

create four tools for our recon process. And I will also teach you how you can also create

your own tools using self scripting. Okay. And this is a very like good part of this full

course. And it is a it is the 29 section. And here you will clear all the concepts of bug

bounty hunting and penetration testing. And in the 30th section, I'm going to give you

a bonus like bonus tip. Okay, so let's meet on the course and like let's go to the course

curriculum. Okay.