Practical Bug Bounty Course Launch

Key Takeaways

what's up everybody I'm very excited to announce a new course that we are launching at TCM Security in partnership with Integrity the course is called practical bug Bounty and it is for anybody that is interested in web application security or bug bounty hunting which focuses a lot of the time on web applications if I just scroll down a little bit to the curriculum you get some really awesome training here and it is made for everybody there's 9 and 1 half hours here and we start out very basic we say hey what's web applications security what is the best practices here what's the difference between bug bounty hunting and a penetration test and we go through and just do a little bit at a time kind of getting your feet wet getting you introduced to web application Technologies and the cool thing is we've got this lab here you've got a custom lab for all the training so all this is unique never seen before anywhere else and we go through hey how do you do reconnaissance and then we get into our attacks all kinds of attacks here what are Brute Force attacks how do we attack multiactor authentication what are ey doors what's broken Access Control what are injection attacks and oh my gosh how many injection attacks are there there squel injection cross- side scripting ssti xxe file upload attacks and we cover all of that we talk about automated tools and scanners how do you use those what's the concept how do we automate some of our things we go into scripting a little bit we talk about other vulnerabilities that you're going to see like csrf and ssrf which is awesome subdomain takeovers open redirects all the fun stuff now this would not be a complete course if we did not also include how to actually report these things so how do we write a pentest report how do we disclose to a VDP or vulnerability disclosure program how do we write a bug Bounty report how do we communicate with clients and triers and the cool thing about this course is it's not just TCM security made we are partnered with Integrity on this so we've got course content not just from myself but from Alex olon on our team and Jonah Burgess who is cryptocat on YouTube if you've never seen him before he does a lot of great content and he does a lot of great content for integrity as well so to actually see from their perspective especially from a bug Bounty platform hey what mistakes are people making how do you not make those same mistakes how do you get invited to programs and do better as a bug Bounty Hunter we've got you all covered with this now the cool thing at the very end when you complete this course you get your certificate of completion you can upload that certific ific of completion to your integrity bug Bounty profile and if you do that it increases your chances of getting invited to a private program if you're not familiar bug buny programs have public programs and private programs private programs make up 90% of the programs on a bug Bounty platform so if you're only looking at 10% of the programs you're really selling yourself short and private programs have a limited amount of hackers not everybody can access them so you have greater access better chances better odds at Landing a bug through these platforms so if you come through and you show that hey I've got this skill set I'm able to do this course I've learned a lot let me upload my certificate maybe you've written a blog or something about it you upload that as well you have greater chances not 100% guarantee but significantly greater chances of getting invited to a private program which is where all the platforms are at right 90% of the platforms are hidden in private so that is an awesome benefit there are no other courses that are like this in my opinion out there right now this is a great collaboration between TCM security and integrity and I highly highly recommend checking it out I will leave a link in the description below both to the course and to Integrity please do consider signing up for integrity even if you don't do the course sign up for integrity it's a great platform it's free it's a great way to earn money side income whatever it might be if you got some extra time you want to learn how to hack fantastic platform as well so that is it very short video just wanted to cover this new course launch very excited about it if you want to hear more detail there's also a live stream from Monday this video is being released on Wednesday so if you just look 2 days back currently from this video you'll see a live stream that we did that covers this answers any additional questions from the audience all that stuff if you just want to find out a little bit more about the course plus it has Jonah and has inie who are awesome people on the stream along with Alex and myself so that's it for the video hopefully you find this useful and until the next video peace out