From a lame SSRF to a full $4000 RCE

Hack for Fun and Profit by thehackerish

Jul 5, 202000:09:49Education

Hello ethical hackers and bug bounty hunters! Welcome to this bug bounty write-up where I show you how I found a Server-Side Request Forgery vulnerability (SSRF). Then, I will explain how I was able to escalate it to obt...

Related Episodes

Continue listening to more episodes from Hack for Fun and Profit.

Certified Red Team Operator Review

Dec 29, 2021 - 00:11:14

In this episode, I will give you my honest review of CRTO (certified red team operator certification) fro...

JavaScript Enumeration for bug bounty hunters

Dec 24, 2020 - 00:10:55

JavaScript Enumeration is a critical skill to have if you want to level up your penetration testing or bu...

OSCP Certification: All you need to know

Jul 30, 2020 - 00:14:13

Hello ethical hackers! In this episode, you will learn everything related to OSCP certification. What is...

Hacking a new web application from start to finish

Jun 4, 2020 - 00:15:34

Hello ethical hackers and bug bounty hunters! I’ve recently conducted a successful penetration testing ag...

Bug bounty tools you should start using!

May 27, 2020 - 00:13:13

Hello ethical hackers and welcome to the world of hacking and bug bounty hunting. Today, I will share the...

This is how you write bug bounty reports that stand out!

May 7, 2020 - 00:15:23

Hello dear ethical hackers and welcome to this new article about bug bounty hunting. In this episode, you...

My bug bounty methodology and how I approach a target for the first time

Apr 30, 2020 - 00:18:16

Welcome again to the Hack for Fun and Profit podcast, where we explore topics related to cyber security a...

Bug bounties: Burnout and your mental health

Apr 12, 2020 - 00:14:31

Hello ethical hackers, today we explore what causes burnout and suggest ways to heal from it and preserve...