BePractical

Sometimes, you need to go to your roots in order to become stronger💪

Hi everyone! Thank you so much for showing the support on the new video. Many people (beginners) asked me which program should they go for during their initial bug bounty hunting. I always recommend them to go with VDP as they usually have all their assets in scope. Recently, one of the private vdp i used to hack on has now gone public and it so many assets in scope!!(recently launched) If anyone is interested, then check out this vdp program here: https://hackerone.com/lpl_financial-vdp?type=team

😇

😤

"How to get started in Bug Bounty as a beginner with no skills at all?"- This is one of the most common question people asked me almost every day! While i often tell them to check out some great resources on YouTube, Medium articles etc, I also noticed that since there are lot of resources on the internet, the people specially beginners often gets confused by the overwhelming resources. This is why, I've thought to create a straight, simple, step-by-step & easy to understand roadmap for those who are just starting & want to get their skills in cyber security and bug bounty. This roadmap helped me to start my journey and helped me to improve my hacking skills & i am pretty sure that if you follow all the steps, at the end, you will be able to develop your hacking skills to the next level! Feel free to check it out this new video of mine on YouTube: https://www.youtube.com/watch?v=XKPTpd7rEKs

Hi everyone! New video will be releasing tomorrow at 11am IST! Stay Tuned❤️

Recently gave CAPen exam & successfully completed it with merit! The exam was highly practical & simulates real world scenario...If you are an intermediate level penetration tester, you won't face any issues in passing this exam If anyone's interested, feel free to check out their website :https://secops.group/pentesting-exams/ (They are running 70% off on every certification. Great opportunity for beginners!)

One of the most critical vulnerability

Just got this news!! The vulnerability was chained together with open redirection and csrf on no authentication field(fun fact: both were out of scope but i was able to chain them together to show the impact) 😄

Hi everyone! New video is out and this time..It is on a real application! https://www.youtube.com/watch?v=0CvqGP1isCE

New video will be releasing tomorrow, Stay tuned!!! ❤️

26,000 subs completed.. Yayy🥳 As always, Thanks a lot for all your support guys!!! Let's keep hacking!!

Finally, I was able to use it on a graphql endpoint!

9 hr straight on a program and finally got this credential.. Next step is to see how I can use it!

Hi everyone! Excited to share that i have now reached over 500+ reputation on HackerOne Planning to spend more time on bug bounty this time!

New video is out! Learn how we can bypass weak host header injection protection in modern web apps Video Link: https://www.youtube.com/watch?v=AAhZp1A4I0A

New video is out! Learn how we can bypass weak host header injection protection in modern web apps Video Link: https://www.youtube.com/watch?v=AAhZp1A4I0A

Hi everyone, New video will be releasing tomorrow at 6pm IST... This will be an interesting one as it covers something which is not known to many people! I hope you all will like it!!

Seems like all of my reported vulnerabilities are triaged.. And with this.. I am currently in top 10 hacker of their program😇 The imp thing always is to do proper recon..all of these vulnerabilities have been found in a single subdomain!