Web Hacking Secrets: How to Hack Legally and Earn Thousands of Dollars at HackerOne [Video Training, LIFETIME Access]

Overview

HackerOne is your big opportunity. This is the platform where you can hack legally and at the same time you can make money. You can hack many different companies like Twitter, Yahoo, Uber, Coinbase, and a lot more. And you can get paid for your findings, for example $100, $1,000, or even $10,000 per one bug. It’s just amazing. All you need is Internet connection and knowledge. Yes – you need knowledge to go from zero to thousands of dollars at HackerOne, and in this video training Dawid Czagan is going to share his knowledge with you.

Dawid Czagan is one of the top hackers at HackerOne and he knows quite a lot about hacking and making money that way. In this video training Dawid will present many award-winning bugs. The more you play with award-winning-bugs the more knowledge you get and the more knowledge you have, the more money you can make. Dawid will also discuss a successful bug hunting strategy that he has been using in the recent years. What’s more, he will present a lot of demos so that you can see how all these things work in practice.

6 hours of high-quality video courses with lots of recorded demos

You will get LIFETIME access to these 6 video courses:

1. Start Hacking and Making Money Today at HackerOne

• • HackerOne: Your Big Opportunity
  • Getting Started with 5 Bugs
  • Automatic Leakage of Password Reset Link  (FREE VIDEO)
  • How to Get Access to the Account of the Logged Out User
  • Insecure Processing of Credit Card Data
  • Disclosure of Authentication Cookie
  • User Enumeration

2. Keep Hacking and Making Money at HackerOne

• • How to Impersonate a User via Insecure Log In  (FREE VIDEO)
  • Sensitive Information in Metadata
  • Disclosure of Credentials
  • Insecure Password Change
  • Dictionary Attack

3. Case Studies of Award-Winning XSS Attacks: Part 1

• • XSS via Image
  • XSS via HTTP Response Splitting
  • XSS via Cookie  (FREE DEMO)
  • XSS via AngularJS Template Injection

4. Case Studies of Award-Winning XSS Attacks: Part 2

• • XSS via XML  (FREE VIDEO)
  • XSS via location.href
  • XSS via vbscript:
  • From XSS to Remote Code Execution

5. DOUBLE Your Web Hacking Rewards with Fuzzing

• • The Basics of Fuzzing
  • Fuzzing with Burp Suite Intruder – Overview
  • Fuzzing for SQL Injection – Demo  (FREE VIDEO)
  • Fuzzing for Path Traversal – Demo
  • Fuzzing with Burp Suite Intruder: Tips and Tricks

6. How Web Hackers Make BIG MONEY: Remote Code Execution

• • From SQL Injection to Remote Code Execution   (FREE VIDEO)
  • From Disclosure of Software Version to Remote Code Execution
  • Remote Code Execution via File Upload
  • Remote Code Execution via Deserialization

More information can be found in the section ”What students will receive”.

Add to basket

What students should know

• Basic hacking skills
• Basic knowledge of web application security
• Basic understanding of XSS attacks (cross-site scripting)

What students will learn

• Master web application security testing
• Become a successful bug hunter
• Go from zero to thousands of dollars at HackerOne.
• Double your web hacking rewards with fuzzing
• Learn how hackers earn thousands of dollars per one bug
• Discover how to find these bugs step-by-step in practice (recorded DEMOS)
• Learn from one of the top hackers at HackerOne

What students will receive 

Students will receive lifetime access to 6 hours of high-quality video courses with lots of recorded demos (hosted on the 3rd party platform Grinfer; subject to terms of use and privacy policy). The access link will be sent after subscribing to Dawid’s newsletter.

What students say about Dawid’s trainings 

References are attached to Dawid’s LinkedIn profile (https://www.linkedin.com/in/dawid-czagan-85ba3666/). They can also be found here (https://silesiasecuritylab.com/services/training/#opinions) – training participants from companies such as Oracle, Adobe, ESET, ING, …

Instructor

Dawid Czagan (@dawidczagan) is an internationally recognised security researcher and trainer. He is listed among top hackers at HackerOne. Dawid Czagan has found security vulnerabilities in Google, Yahoo, Mozilla, Microsoft, Twitter and other companies. Due to the severity of many bugs, he has received numerous awards for his findings.

Dawid Czagan shares his security bug hunting experience in his hands-on trainings “Hacking Web Applications – Case Studies of Award-Winning Bugs in Google, Yahoo, Mozilla and More” and “Black Belt Pentesting / Bug Hunting Millionaire: Mastering Web Attacks with Full-Stack Exploitation”. He delivered security training courses at key industry conferences such as Hack In The Box (Amsterdam), CanSecWest (Vancouver), 44CON (London), Hack In Paris (Paris), DeepSec (Vienna), NorthSec (Montreal), HITB GSEC (Singapore), BruCON (Ghent) and for many corporate clients. His students include security specialists from Oracle, Adobe, ESET, ING, Red Hat, Trend Micro, Philips and government sector (references are attached to Dawid Czagan’s LinkedIn profile (https://www.linkedin.com/in/dawid-czagan-85ba3666/). They can also be found here: https://silesiasecuritylab.com/services/training/#opinions).

Dawid Czagan is a founder and CEO at Silesia Security Lab – a company which delivers specialised security testing and training services. He is also an author of online security courses. To find out about the latest in Dawid Czagan’s work, you are invited subscribe to his newsletter (https://silesiasecuritylab.com/newsletter) and follow him on Twitter (@dawidczagan) and LinkedIn (https://www.linkedin.com/in/dawid-czagan-85ba3666/).