My first step into Bug Bounty

السلام عليكم ورحمة الله وبركاته

Let’s start my journey, i started looking my carrier in Cybersecurity when i was 15 year old. During that time i was without smart phone and computer.

Then after 2/3 years i got my first phone i started exploring Script Kiddi’s things 😂. Then entered in college i got laptop, now 3 months ago i started in exploring stuff related RED TEAMING.

Still i am learning stuff like Networking, and languages like JavaScript and PHP to understand core of web. With that explored TryHackMe and it changed my way of learning.

Still i don’t have much knowledge of OWASP Top 10 , but i think picking a target and with that exploring OWASP Top 10 will help me more.

Picked a target from Bug-Bounties Site, and firstly explored site. Let’s name this site example.com. It was using Java as programming language and IIS as a web IIS as a web server.

Firstly i scanned for Subdomain Takeover i got bunch of Vulnerable subdomains, some of them are are also showing errors. But i am still in testing phase as i got my exams till 1 feb 🥲.

Also i started my Burp suite and tested for one endpoint for Open Redirect but got nothing.

That’s it now focusing on exams will start testing again after exams with that will continue learning about Security.

My X N4!TR0 07 Thanks 💚