Z-winK University v1.0 (ZU) - Bug Bounty Education

Find XXE with Burp Suite Intruder Content-Type Scanning - Bug Bounty & Hacking Education Jul 7, 2022 In this video, I use a HacktheBox environment to show how quickly scanning POST requests for different supported content-types can lead to XXE (which is a bug bounty P1). This is a great process/to…

Let's Hack GraphQL - Introspection, Playground, Queries, Mutations, and Fun! Aug 23, 2022 In this video designed to teach an introduction to bug bounty hunting graphQL, I explain what you need to know and get into it manually which is how I test graphQL. Graph, like an API, is susceptible to most …

Hacker Training: RCE, SQLi, Sensitive Information, Auth Bypass on Hack The Box Jul 6, 2022 In this bug bounty training video, we go through four Hack the Box labs together live. These labs are rated easy to intermediate and are a great way to see how different types of vulnerabilities can be found…

Bug Bounty Bootcamp - Working with a Real Target https://go.intigriti.com/zwink In our #fifth bug bounty bootcamp series, we take a look at Zseano's FastFoodHackings website with 15 vulnerabilities you can find in it. I explore some of my thought process and how I test and look for issues on targe…

Bug Bounty Bootcamp - Resources for Learning & Reflected Iframe Injection/XSS https://go.intigriti.com/zwink In our #fourth bug bounty bootcamp video, I go over great resources for learning the various ethical hacking vulnerabilities and then dive into a live web academy lab to demonstrate reflect…

Bug Bounty Bootcamp - All About the HTTP Payload https://go.intigriti.com/zwink In the #third bug bounty bootcamp video, I go over the most important parts of the HTTP payload and we get into the interactions between the website and Burpsuite -- talking about the different parts and pieces that ma…

Bug Bounty Bootcamp - The Basic Hacking Tools - Firefox, Burpsuite, VPN, Notepad++ https://go.intigriti.com/zwink In our #second bug bounty bootcamp video series, I discuss the basic hacking tools I use and how to get them connected together and working so we can get into Bug Bounty. I also explai…

Bug Bounty Bootcamp - Intro to Z-winK, Bug Bounty, Intigriti, & Ethical Hacking https://go.intigriti.com/zwink In this #first video of our exciting new Bug Bounty Bootcamp series, I introduce myself a bit, discuss the Intigriti platfrom, what is Bug Bounty & motivations to participate, and Ethical…

Treasure Hunt #1 Explained - Manual Testing I go over the first treasure hunt to show how it is solved, explaining the importance of manual testing when bounty hunting and web pen testing and also how important your filters and settings can be when it comes to attention to detail.

• Tell us about your background, was it in computers/IT, and has it helped? • Is programming knowledge needed or required to be successful? Is it necessary to have a CS degree? • Tell us about your journey from zero to now (beginning knowledge, first bugs, collaborations • What is my motivation day …

Interview #4: Question and Answer Session #1 Description: 👇

Interview #3: You Don't Make Money for Bugs You Don't Log In this third interview style video, I explain that (at least in my mind), bug reports are broken down into three main categories: explicitly exploitable, likely exploitable, and defense in depth. I attempt to explain how a combination of co…

Interview #2: Picking a Bug Bounty Program In this video, I answer the question "Z-wink, how do you choose a bug bounty program"? We discuss payment amounts per triage level, scoping, allowed vulnerability types, number of bugs logged, response time, average payout, company age, target difficulty, …

Interview #1: The Positives of Bug Bounty Hunting In this interview style video, I just talk to you about some of my experiences and goals in getting started with bug bounty, a bit about my journey, positives of bug bounty hunting, income generation, flexibility, and the like. It's just me talkin…