Hussein Daher: Bug Bounty Career and Methodology

I was in please tell us about yourself my name is living in Ivory Coast I've been doing bike bounces for more than approximately 8 years now since early 2014. I've been the hiking industry for more than 10 years so when I was 12 I started and today I'm doing backbone tea and I've started a fantastic company called webminify okay how long did it take you until you found your first significant high impact payout vulnerability I think that the first high impact burglary which I have found uh was found after maybe two months of when I started back bounty

the most interesting bug I have found is a book where I had did some server-side request forgery and it was like a kind of browser embedded into an application and so I had to use like um XML HTTP request to fetch the content from AWS and then give get send it back to meet my own server so that was really fun to exploit and it was like I think it was one of the best bugs I found because the exploitation of that was really fun all right what do you do to keep up with all the new trends I don't usually try to keep up because I try uh most of the time it's like when

we have slack Channels with other hikers and stuff and so everyone just like keeps sharing what they found new and stuff so I just like learned from the from there I don't like them to go and just sign up to a newsletter okay do you collaborate with other hackers if yes can you name a few yeah I do collaborate a lot with um ships which emphaseke you with a hx-01 on hackeron backroad I had to collaborate with Rizzo I do collaborate with today's new Eric and with other hikers really great hackers I know okay how do you approach a Target I approached Target by going wide and deep into the application the time of I

try to go like it depends of this group but most of the time when the scoop is really big I can go really wide and then try to go manually into each application to good the cheaper possible okay methodology is not really different from the others but what what makes a difference is that I do a lot of permutations so that when I have a list of sub domain that I found via other techniques I'm just going to do a lot of permutations until I get like a really high number of subdomains okay how do you balance your personal life and work it's really hard to balance some personal life and work because we are

trying to achieve some something big and Hiking can be really adjective because at some point you might just like find yourself hacking for more hours than you wanted um so managing life and work balance is just like setting you yourself be hard to just stop hiking so for example I wake up really early I wake up at five and I tell myself okay at five in the afternoon I have to stop hiking and just like do other things so that's still three 12 hours of hiking but at least I know that I'm stopping at some point okay um one last question how has been your experience with besides antibi my experience with besides was awesome

because this is my first time in India and when I started backbonechi like really early my first friends were Indian and so I had to come back here and give back to the community that um I once was friendly in the start so this is a great experience for me I'm really glad and really humble probably humbled to be here okay thank you Jose we hope to see you in upcoming besides underground editions as well thank you so much see you