The document is a presentation by Abhijeth Dugginapeddi discussing his experiences with bug bounties and cybersecurity. He shares insights on web security, penetration testing, and tools for discovering vulnerabilities, along with a few personal anecdotes and acknowledgments to fellow researchers. The presentation includes tips on various aspects of hacking and emphasizes the importance of community contributions to cybersecurity.

1. --Abhijeth Dugginapeddi
RECON AND BUG BOUNTIES WHAT A
GREAT <3 STORY

2. PPT 101– INTRODUCE THE SPEAKER
• I think I’m still a script kiddie maybe?
• 9:00-17:00 work at a large organization
• 17:00-9:00 work on the internet
• Got lucky in finding bugs with Google, Facebook, Microsoft,
Ebay etc
• One among top 5 bug bounty researchers on Synack
• Stop bragging and start the preso man

3. AGENDA

5. DO YOU DO PEN TESTING?

6. WEB SECURITY

7. AN UNINFORMED THREAT MODEL...
www.website.com
shop.website.com
blog.website.com
stage.website.com
db.website.com
api.website.com
dev.website.com
backup-syd.website.com
archive.website.com
s3 Buckets
github
pastebin
third party providers
mobile applications
analytics
etc etc…

8. BUT WHY?

9. ATTACK DIFFERENTLY

10. OK COOL BUT HOW?

11. DO YOU STILL REVERSE IP

12. SUB DOMAIN-ING

13. SUB DOMAINS
• Sublist3r
• Masscan
• Shodan
• censys

14. Yo!! Does this work?

16. OH YEA TEST DATABASES MADE PUBLIC?
SURE THANKS

18. SNAPSHOT-ING YOUR SUB DOMAIN LIST

19. SOMETHING TO HELP YOU ALONG...
snapple.py

20. DIVING IN: HACKING WITH
GOOGLE(DEMO)

22. DO YOU GITHUB?
• Site.com API_key
• Password @site.com
• Site.com secret_key
• Site.com FTP password
• Site.com ssh
• Will leave combinations to your imagination

24. EVER TRIED LINK FINDER?

25. #RANDOM TARGET

26. #RANDOM TARGET

27. OOPSY

28. MORAL OF THE STORY

29. FEW PEOPLE YOU SHOULD FOLLOW FOR
SOME COOL STUFF IN THIS SPACE
• Jason Haddix
• Nahamsec
• Naffy
• Shubs_shah
• Bharath kumar
• Edoverflow
• And me ;)

30. CREDITS
https://imgflip.com/memegenerator for memes/gifs
All the authors of these tools  Great job guys and Thank you!!

31. Thanks to these guys for making internet secure again 
@Bugcrowd @synack @Hacker0x01

32. Cheers to @Reconvillage
questions?
@abhijeth