M01A01 - G4BR13L P4T0 - D0 Bug 40 B0unty

CURSOS DISPONIVEIS - SIGA O CANAL PARA TER ACESSO AO ARCEVO COMPLETO (GRATIS)

>GABRIEL PATO - Do Bug ao Bounty
>G4BR13L P4T0 - D0 Bug 40 B0unty

M01. Conceitos Base

1. Bem Vindo!
https://rumble.com/v2lcr92-m01a01-g4br13l-p4t0-d0-bug-40-b0unty.html
2. O que é uma aplicaçao web
https://rumble.com/v2lcr8a-m01a02-g4br13l-p4t0-d0-bug-40-b0unty.html
3. Client e Server (parte 1)
https://rumble.com/v2lcr7i-m01a03-g4br13l-p4t0-d0-bug-40-b0unty.html
4. Client e Server (parte 2)
https://rumble.com/v2lcr5k-m01a04-g4br13l-p4t0-d0-bug-40-b0unty.html
5. Teste Black Box
https://rumble.com/v2lcr4s-m01a05-g4br13l-p4t0-d0-bug-40-b0unty.html
6. O que é Protocolo
https://rumble.com/v2lcr38-m01a06-g4br13l-p4t0-d0-bug-40-b0unty.html
7. Protocolo HTTP - Introdução
https://rumble.com/v2lcr2g-m01a07-g4br13l-p4t0-d0-bug-40-b0unty.html
8. Request e Request Line
https://rumble.com/v2lcpl6-m01a08-g4br13l-p4t0-d0-bug-40-b0unty.html
9. Request Headers, MIME-types e User-Agents
DSCtop.html
https://rumble.com/v2lcpho-m01a09-g4br13l-p4t0-d0-bug-40-b0unty.html
10. Response, Status Line e Status Codes
https://rumble.com/v2lcpgi-m01a10-g4br13l-p4t0-d0-bug-40-b0unty.html
11. Response Headers e Body (pt 2)
https://rumble.com/v2lcpek-m01a11-g4br13l-p4t0-d0-bug-40-b0unty.html
12. Versoes do Protocolo HTTP
https://rumble.com/v2lcpd0-m01a12-g4br13l-p4t0-d0-bug-40-b0unty.html
13. Conhecendo a aba Network das DevTools
https://rumble.com/v2lcpbg-m01a13-g4br13l-p4t0-d0-bug-40-b0unty.html
14. O que é uma Proxy
https://rumble.com/v2lcp06-m01a14-g4br13l-p4t0-d0-bug-40-b0unty.html
15. Por que o Charles Proxy
https://rumble.com/v2lcoo4-m01a15-g4br13l-p4t0-d0-bug-40-b0unty.html
16. Beneficio Charles Proxy com 50_ off
https://rumble.com/v2lco52-m01a16-g4br13l-p4t0-d0-bug-40-b0unty.html
17. Configurando o Charles Proxy
https://rumble.com/v2lco3w-m01a17-g4br13l-p4t0-d0-bug-40-b0unty.html
18. Resolvendo problemas do Charles Proxy
https://rumble.com/v2lco2q-m01a18-g4br13l-p4t0-d0-bug-40-b0unty.html
19. Conhecendo o Charles Proxy
https://rumble.com/v2lco00-m01a19-g4br13l-p4t0-d0-bug-40-b0unty.html
20. EXERCICIO 01 - DevTools e Charles Proxy
https://rumble.com/v2lcnkg-m01a20-g4br13l-p4t0-d0-bug-40-b0unty.html
21. RESOLUCAO do EXERCICIO 01 (Charles e DevTools)
https://rumble.com/v2lcnjo-m01a21-g4br13l-p4t0-d0-bug-40-b0unty.html
22. EXERCICIO 02 - DevTools e Charles Proxy
https://rumble.com/v2lcnii-m01a22-g4br13l-p4t0-d0-bug-40-b0unty.html
23. RESOLUCAO do EXERCICIO 02 (Charles e DevTools)
https://rumble.com/v2lcngy-m01a23-g4br13l-p4t0-d0-bug-40-b0unty.html
24. URL
https://rumble.com/v2lcmyo-m01a24-g4br13l-p4t0-d0-bug-40-b0unty.html
25. Respostas Estßticas e DinÔmicas
https://rumble.com/v2lcmya-m01a25-g4br13l-p4t0-d0-bug-40-b0unty.html
26. WWW-Form e URL Encoding
https://rumble.com/v2lcmxw-m01a26-g4br13l-p4t0-d0-bug-40-b0unty.html
27. Montagem de Pßginas Client-side e Server-side
https://rumble.com/v2lcmx4-m01a27-g4br13l-p4t0-d0-bug-40-b0unty.html
28. Sess§es em HTTP
https://rumble.com/v2lcmwc-m01a28-g4br13l-p4t0-d0-bug-40-b0unty.html
29. Charles Proxy Breakpoints, Rewrite e Map
https://rumble.com/v2lcmji-m01a29-g4br13l-p4t0-d0-bug-40-b0unty.html
30. Charles Proxy Compose
https://rumble.com/v2lcm20-m01a30-g4br13l-p4t0-d0-bug-40-b0unty.html
31. O que é uma Vulnerabilidade
https://rumble.com/v2lcm02-m01a31-g4br13l-p4t0-d0-bug-40-b0unty.html
32. EquilÝbrio Client e Server
https://rumble.com/v2lclm2-m01a32-g4br13l-p4t0-d0-bug-40-b0unty.html
33. EXERCICIO 03 - Hackeie este Quiz
https://rumble.com/v2lclf2-m01a33-g4br13l-p4t0-d0-bug-40-b0unty.html
34. RESOLUCAO do EXERCICIO 03 (Game - Quiz)
https://rumble.com/v2lclea-m01a34-g4br13l-p4t0-d0-bug-40-b0unty.html
35. EXERCICIO - Game 02 e 03 [731256500]
https://rumble.com/v2lclb6-m01a35-g4br13l-p4t0-d0-bug-40-b0unty.html
36. EXERCICIO - Game 02 e 03 [731256500]
https://rumble.com/v2lclas-m01a36-g4br13l-p4t0-d0-bug-40-b0unty.html
37. RESOLUCAO dos EXERCICIOs 04 e 05 (Slotmachine)
https://rumble.com/v2lcl0a-m01a37-g4br13l-p4t0-d0-bug-40-b0unty.html
38. EXERCICIO - Game - Vila [731632305]
https://rumble.com/v2lckyc-m01a38-g4br13l-p4t0-d0-bug-40-b0unty.html
39. RESOLUCAO do EXERCICIO 06 - Parte 1 (Vila)
https://rumble.com/v2lckxk-m01a39-g4br13l-p4t0-d0-bug-40-b0unty.html
40. RESOLUCAO do EXERCICIO 06 - Parte 2 (Vila)
https://rumble.com/v2lckp0-m01a40-g4br13l-p4t0-d0-bug-40-b0unty.html
41. RESOLUCAO do EXERCICIO 06 - Parte 3 (Vila)
https://rumble.com/v2lckj6-m01a41-g4br13l-p4t0-d0-bug-40-b0unty.html

M02. Mapeando a Infraestrutura do Alvo

1. Introduçao ao Modulo 2
https://rumble.com/v2lbz0w-m02a01-g4br13l-p4t0-d0-bug-40-b0unty.html
2. Reconhecendo nosso Alvo
https://rumble.com/v2lbz0w-m02a01-g4br13l-p4t0-d0-bug-40-b0unty.html
3. Nosso Workflow para Reconhecimento do Alvo
https://rumble.com/v2lbyxs-m02a03-g4br13l-p4t0-d0-bug-40-b0unty.html
4. 1.1 DomÝnio Nosso ponto de partida
https://rumble.com/v2lbywm-m02a04-g4br13l-p4t0-d0-bug-40-b0unty.html
5. 1.2 - Reverse Whois
https://rumble.com/v2lbyua-m02a05-g4br13l-p4t0-d0-bug-40-b0unty.html
6. 1.3 - Reverse Name Server
https://rumble.com/v2lbyfi-m02a06-g4br13l-p4t0-d0-bug-40-b0unty.html
7. 1.4 - Keywords e TLD
https://rumble.com/v2lbyeq-m02a07-g4br13l-p4t0-d0-bug-40-b0unty.html
8. 2.1 - DNS Zone Transfer
https://rumble.com/v2lbyd6-m02a08-g4br13l-p4t0-d0-bug-40-b0unty.html
9. 2.2 - Certificate Transparency
https://rumble.com/v2lby66-m02a09-g4br13l-p4t0-d0-bug-40-b0unty.html
10. 2.3 - Archives
https://rumble.com/v2lby5e-m02a10-g4br13l-p4t0-d0-bug-40-b0unty.html
11. 2.4 - Virustotal
https://rumble.com/v2lbxni-m02a11-g4br13l-p4t0-d0-bug-40-b0unty.html
12. 2.5 - Search Engines (Buscadores)
https://rumble.com/v2lbxj8-m02a18-g4br13l-p4t0-d0-bug-40-b0unty.html
13. 2.6 - Bases de Subdominios
https://rumble.com/v2lbxho-m02a13-g4br13l-p4t0-d0-bug-40-b0unty.html
14. 2.7 - Bruteforce
https://rumble.com/v2lbxgi-m02a14-g4br13l-p4t0-d0-bug-40-b0unty.html
15. 3.1 - Autonomous System (AS)
https://rumble.com/v2lbx8q-m02a15-g4br13l-p4t0-d0-bug-40-b0unty.html
16. 3.2 - Buscadores de Devices Shodan e outros
https://rumble.com/v2lbwze-m02a16-g4br13l-p4t0-d0-bug-40-b0unty.html
17. 3.3 - Portscan Encontrando Servidores Web
https://rumble.com/v2lbwxg-m02a17-g4br13l-p4t0-d0-bug-40-b0unty.html
18. 4.1 - Reverse IP
https://rumble.com/v2lbwuq-m02a18-g4br13l-p4t0-d0-bug-40-b0unty.html
19. 4.2 - Bruteforce de VHosts
https://rumble.com/v2lbwtk-m02a19-g4br13l-p4t0-d0-bug-40-b0unty.html
20. 5.1 - Reverse Analytics e outros serviços
https://rumble.com/v2lbwse-m02a20-g4br13l-p4t0-d0-bug-40-b0unty.html

M03. Teste de Vulnerabilidade
1. AUTENTICACAO, AUTORIZACAO e controle de acesso
https://rumble.com/v2lbsdc-m03a01-g4br13l-p4t0-d0-bug-40-b0unty.html
2. IDOR IntroduþÒo
https://rumble.com/v2lbsc6-m03a02-g4br13l-p4t0-d0-bug-40-b0unty.html
3. IDOR O que Ú e como constatar
https://rumble.com/v2lbs5k-m03a03-g4br13l-p4t0-d0-bug-40-b0unty.html
4. IDOR Exemplo Passagem AÚrea.txt

5. IDOR Hackeie este Invoice.txt

6. IDOR RESOLUCAO do EXERCICIO do Invoice
https://rumble.com/v2lbry6-m03a06-g4br13l-p4t0-d0-bug-40-b0unty.html
7. XSS Introduçao
https://rumble.com/v2lbrvu-m03a07-g4br13l-p4t0-d0-bug-40-b0unty.html
8. XSS Same-origin Policy
https://rumble.com/v2lbrua-m03a08-g4br13l-p4t0-d0-bug-40-b0unty.html
9. XSS IntroduþÒo (pt. 2)
https://rumble.com/v2lbrtw-m03a09-g4br13l-p4t0-d0-bug-40-b0unty.html
10. XSS ExecuþÒo de JavaScript
https://rumble.com/v2lbrt4-m03a10-g4br13l-p4t0-d0-bug-40-b0unty.html
11. XSS Classificaçao - Reflected, Stored e DOM-XSS
https://rumble.com/v2lbq2w-m03a11-g4br13l-p4t0-d0-bug-40-b0unty.html
12. XSS Identificando um XSS
https://rumble.com/v2lbq0k-m03a12-g4br13l-p4t0-d0-bug-40-b0unty.html
13. XSS RESOLUCAO do Lab 04
https://rumble.com/v2lbpwa-m03a13-g4br13l-p4t0-d0-bug-40-b0unty.html
14. RESOLUCAO dos labs 05 e 06 de Cross-site Scripting
https://rumble.com/v2lbpty-m03a14-g4br13l-p4t0-d0-bug-40-b0unty.html
15. XSS RESOLUCAO do Lab 07
https://rumble.com/v2lbpl0-m03a15-g4br13l-p4t0-d0-bug-40-b0unty.html
16. XSS RESOLUCAO dos Labs 08 e 09
https://rumble.com/v2lbovc-m03a16-g4br13l-p4t0-d0-bug-40-b0unty.html
17. XSS RESOLUCAO dos Labs 10, 11 e 12
https://rumble.com/v2lbot0-m03a17-g4br13l-p4t0-d0-bug-40-b0unty.html
18. XSS Payloads
https://rumble.com/v2lboru-m03a18-g4br13l-p4t0-d0-bug-40-b0unty.html
19. XSS Polyglot
https://rumble.com/v2lbop4-m03a19-g4br13l-p4t0-d0-bug-40-b0unty.html
20. XSS Blind Cross-site Scripting
https://rumble.com/v2lbodu-m03a20-g4br13l-p4t0-d0-bug-40-b0unty.html

M04. Relatorio

1. Introducao
https://rumble.com/v2lblto-m04a07-g4br13l-p4t0-d0-bug-40-b0unty.html
2. Titulo
https://rumble.com/v2lblrc-m04a02-g4br13l-p4t0-d0-bug-40-b0unty.html
3. Descriçao
https://rumble.com/v2lbktw-m04a03-g4br13l-p4t0-d0-bug-40-b0unty.html
4. Impacto e Severidade
https://rumble.com/v2lbkrk-m04a04-g4br13l-p4t0-d0-bug-40-b0unty.html
5. Reproduçao
https://rumble.com/v2lbkq0-m04a05-g4br13l-p4t0-d0-bug-40-b0unty.html
6. Recomendaçoes de Correçao
https://rumble.com/v2lbklq-m04a06-g4br13l-p4t0-d0-bug-40-b0unty.html
7. Causa Raiz
https://rumble.com/v2lbkk6-m04a07-g4br13l-p4t0-d0-bug-40-b0unty.html

M05. Mercado e Oportunidades
1. Introduçao
https://rumble.com/v2lbjtq-m05a01-g4br13l-p4t0-d0-bug-40-b0unty.html
2. Bug Bounty O que Ú e como participar
https://rumble.com/v2lbjsy-m05a02-g4br13l-p4t0-d0-bug-40-b0unty.html
4. Programas P·blicos e Privados
https://rumble.com/v2lbj7k-m05a04-g4br13l-p4t0-d0-bug-40-b0unty.html
5. HackerOne e Bugcrowd
https://rumble.com/v2lbj4u-m05a05-g4br13l-p4t0-d0-bug-40-b0unty.html
6. Synack
https://rumble.com/v2lbj1q-m05a06-g4br13l-p4t0-d0-bug-40-b0unty.html
7. Etapas apos reportar uma vulnerabilidade
https://rumble.com/v2lbj06-m05a07-g4br13l-p4t0-d0-bug-40-b0unty.html
8. Modelo de remuneraþÒo por teste - Cobalt
https://rumble.com/v2lbim6-m05a08-g4br13l-p4t0-d0-bug-40-b0unty.html

6. Dicas e EstratÚgias
1. Como nao desistir no meio do caminho
https://rumble.com/v2lbi16-m06a01-g4br13l-p4t0-d0-bug-40-b0unty.html
2. As caracteristicas de um bom hacker
https://rumble.com/v2lbhte-m06a02-g4br13l-p4t0-d0-bug-40-b0unty.html
3. EstratÚgias para Bug Bounty
https://rumble.com/v2lbhqo-m06a03-g4br13l-p4t0-d0-bug-40-b0unty.html
4. Conselhos do Pato
https://rumble.com/v2lbhny-m06a04-g4br13l-p4t0-d0-bug-40-b0unty.html
5. Lições de um Hacker milionário
https://rumble.com/v2lbh3q-m06a05-g4br13l-p4t0-d0-bug-40-b0unty.html

7. Extras
1. Cuidados juridicos para Hackers éticos (Dr. Luiz Augusto D_urso)
https://rumble.com/v2lbgt8-m07a01-bonus-g4br13l-p4t0-d0-bug-40-b0unty.html
2. Entrevista com os fundadores da BugHunt
https://rumble.com/v2lbfla-m07a02-bonus-g4br13l-p4t0-d0-bug-40-b0unty.html
3. Como ser mais criativo com Denilson Shikako
https://rumble.com/v2lbb5g-m07a03-bonus-g4br13l-p4t0-d0-bug-40-b0unty.html
4. Dicas do Jornada Mindset com William Zanchet
https://rumble.com/v2lb6sq-m07a04-bonus-g4br13l-p4t0-d0-bug-40-b0unty.html