{"id":11756,"date":"2023-03-20T08:31:37","date_gmt":"2023-03-20T08:31:37","guid":{"rendered":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/"},"modified":"2023-08-08T09:23:05","modified_gmt":"2023-08-08T09:23:05","slug":"offensive-bug-bounty-hitb2023hkt","status":"publish","type":"product","link":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/","title":{"rendered":"Offensive Bug Bounty (HKT)"},"content":{"rendered":"
\n
\n

ATTEND IN-PERSON<\/span>: Onsite in Phuket
\n<\/strong>\"\"<\/a><\/span><\/strong><\/h4>\n

DATE: 21-23 August 2023<\/strong><\/h4>\n<\/div>\n

TIME: 09:00 to 17:00 ICT\/GMT+7<\/strong><\/h4>\n\n\n\n\n\n\n\n
Date<\/strong><\/td>\nDay<\/strong><\/td>\nTime<\/strong><\/td>\nDuration<\/strong><\/td>\n<\/tr>\n
21 Aug<\/td>\nMonday<\/td>\n0900-17:00 ICT\/GMT+7<\/td>\n8 Hours<\/td>\n<\/tr>\n
22 Aug<\/td>\nTuesday<\/td>\n0900-17:00 ICT\/GMT+7<\/td>\n8 Hours<\/td>\n<\/tr>\n
23 Aug<\/td>\nWednesday<\/td>\n0900-17:00 ICT\/GMT+7<\/td>\n8 Hours<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Bug bounty Hunting is the act of finding security vulnerabilities or bugs in a website and responsibly disclosing it to that company\u2019s security team in an ethical way.<\/h5>\n

Bug bounties, also known as responsible disclosure programs, are set up by companies to encourage people to report potential issues discovered on their sites. Some companies choose to reward a researcher with bounty, swag, or an entry in their hall-of-fame list. If you are interested in web application security, then they have a great place of honing your skills, with the potential of earning some bounty and credibility at the same time.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

Agenda<\/strong><\/h5>\n

 <\/p>\n

\n
\n
\n

Day 1\u00a0<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n
\n
    \n
  1. Introduction<\/li>\n
  2. Information Gathering & Basic Terminologies 2: Recon For Bug Bounty Hunting<\/li>\n
  3. Introduction of Burpsuite<\/li>\n
  4. Host Header Injection<\/li>\n
  5. URL Redirection<\/li>\n
  6. Parameter Tampering<\/li>\n
  7. HTML Injection<\/li>\n
  8. File Inclusion<\/li>\n
  9. Missing\/insufficient SPF record<\/li>\n
  10. Insecure CORS Configuration<\/li>\n
  11. Server Side Request Forgery 13: Critical File Found<\/li>\n
  12. Source Code Disclosure<\/li>\n
  13. Cross Site Request Forgery 16: NO RATE LIMITING<\/li>\n
  14. Long Password Dos Attack<\/li>\n
  15. HSTS<\/li>\n
  16. Insecure Direct Object Refernce<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n
    \n
    \n

     <\/p>\n

    Day 2<\/strong><\/p>\n<\/div>\n<\/div>\n

    \n
    \n
    \n
    \n
    \n
    \n
      \n
    1. Comprehensive XSS<\/li>\n
    2. Hostile Subdomain Takeover<\/li>\n
    3. SQL Injection<\/li>\n
    4. Command Injection<\/li>\n
    5. File Uploading<\/li>\n
    6. XML External Entity Injection 26: Account Lockout<\/li>\n
    7. Advanced SQL Injection<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
      \n
      \n

       <\/p>\n

      Day 3<\/strong><\/p>\n<\/div>\n<\/div>\n

      \n
      \n
      \n
      \n
      \n
      \n
        \n
      1. Android App Dynamic Vulnerability Hunting 29: Ios App Dynamic Vulnerability Hunting<\/li>\n
      2. Hostile Subdomain Takeover<\/li>\n
      3. Buffer Overflow<\/li>\n
      4. WordPress<\/li>\n
      5. Joomla<\/li>\n
      6. Drupal<\/li>\n
      7. Cms Vulnerability Hunting 36: Session Fixation<\/li>\n
      8. Conclusion<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
        <\/h5>\n","protected":false},"excerpt":{"rendered":"

        ATTEND IN-PERSON: Onsite in Phuket DATE: 21-23 August 2023 TIME: 09:00 to 17:00 ICT\/GMT+7 Date Day Time Duration 21 Aug Monday 0900-17:00 ICT\/GMT+7 8 Hours 22 Aug Tuesday 0900-17:00 ICT\/GMT+7 8 Hours 23 Aug Wednesday 0900-17:00 ICT\/GMT+7 8 Hours Bug bounty Hunting is the act of finding security vulnerabilities or bugs in a website and […]<\/p>\n","protected":false},"featured_media":11755,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false},"product_cat":[61,77,57],"product_tag":[],"class_list":{"0":"post-11756","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-3-day-training","7":"product_cat-hitb2023hkt","8":"product_cat-in-person","10":"first","11":"instock","12":"featured","13":"shipping-taxable","14":"purchasable","15":"product-type-simple"},"acf":[],"yoast_head":"\nOffensive Bug Bounty (HKT) - HITBSecConf2023 - Phuket<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Offensive Bug Bounty (HKT) - HITBSecConf2023 - Phuket\" \/>\n<meta property=\"og:description\" content=\"ATTEND IN-PERSON: Onsite in Phuket DATE: 21-23 August 2023 TIME: 09:00 to 17:00 ICT\/GMT+7 Date Day Time Duration 21 Aug Monday 0900-17:00 ICT\/GMT+7 8 Hours 22 Aug Tuesday 0900-17:00 ICT\/GMT+7 8 Hours 23 Aug Wednesday 0900-17:00 ICT\/GMT+7 8 Hours Bug bounty Hunting is the act of finding security vulnerabilities or bugs in a website and […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/\" \/>\n<meta property=\"og:site_name\" content=\"HITBSecConf2023 - Phuket\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-08T09:23:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1067\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/\",\"name\":\"Offensive Bug Bounty (HKT) - HITBSecConf2023 - Phuket\",\"isPartOf\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg\",\"datePublished\":\"2023-03-20T08:31:37+00:00\",\"dateModified\":\"2023-08-08T09:23:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#primaryimage\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg\",\"contentUrl\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg\",\"width\":1600,\"height\":1067},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Shop\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/shop\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Offensive Bug Bounty (HKT)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/\",\"name\":\"HITBSecConf2023 - Phuket\",\"description\":\"August 22 - 26 @ InterContinental\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Offensive Bug Bounty (HKT) - HITBSecConf2023 - Phuket","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/","og_locale":"en_US","og_type":"article","og_title":"Offensive Bug Bounty (HKT) - HITBSecConf2023 - Phuket","og_description":"ATTEND IN-PERSON: Onsite in Phuket DATE: 21-23 August 2023 TIME: 09:00 to 17:00 ICT\/GMT+7 Date Day Time Duration 21 Aug Monday 0900-17:00 ICT\/GMT+7 8 Hours 22 Aug Tuesday 0900-17:00 ICT\/GMT+7 8 Hours 23 Aug Wednesday 0900-17:00 ICT\/GMT+7 8 Hours Bug bounty Hunting is the act of finding security vulnerabilities or bugs in a website and […]","og_url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/","og_site_name":"HITBSecConf2023 - Phuket","article_modified_time":"2023-08-08T09:23:05+00:00","og_image":[{"width":1600,"height":1067,"url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/","url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/","name":"Offensive Bug Bounty (HKT) - HITBSecConf2023 - Phuket","isPartOf":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#primaryimage"},"image":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#primaryimage"},"thumbnailUrl":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg","datePublished":"2023-03-20T08:31:37+00:00","dateModified":"2023-08-08T09:23:05+00:00","breadcrumb":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#primaryimage","url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg","contentUrl":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-content\/uploads\/sites\/19\/2023\/03\/audience.jpg","width":1600,"height":1067},{"@type":"BreadcrumbList","@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/product\/offensive-bug-bounty-hitb2023hkt\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/"},{"@type":"ListItem","position":2,"name":"Shop","item":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/shop\/"},{"@type":"ListItem","position":3,"name":"Offensive Bug Bounty (HKT)"}]},{"@type":"WebSite","@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website","url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/","name":"HITBSecConf2023 - Phuket","description":"August 22 - 26 @ InterContinental","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/product\/11756"}],"collection":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/product"}],"about":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/types\/product"}],"replies":[{"embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/comments?post=11756"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/media\/11755"}],"wp:attachment":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/media?parent=11756"}],"wp:term":[{"taxonomy":"product_cat","embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/product_cat?post=11756"},{"taxonomy":"product_tag","embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/product_tag?post=11756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}