So with bug bounty hunting, this is essentially where you are able to find vulnerabilities in software
websites and web applications and be able to get paid by companies for your services.
So you're pretty much the one that's, you know, coming in and saying, hey, I found these books here.
I found these bugs over there.
I found these loopholes here.
You guys need to patch these up.
And once you're able to find those bugs, companies will actually pay you to uncover those.
And so you're pretty much just breaking into software, right?
It's really that simple.
And then you're writing a report as to what you found, how you found it, and then given recommendations
as far as what they can do to patch that up.
And like I mentioned, some hackers are able to make several thousands, if not a six figure income
or more just by doing bug bounty hunting.
Right.
A lot of these folks who actually do this full time, maybe because they don't want to be client facing,
they don't want to work for clients either on the freelancing or consulting side.
And so they'll just stay behind the scenes, behind the computer and essentially get paid to find bugs
within various organizations.
And a resource here where you can practice finding bugs is O.W. Aspey dog.
And you can also take a look at the Google book, Hunter University as well.
And three resources here for you to get started.
Actually, getting paid with bug bounty hunting is hacker one and then bug crowd dotcom and integrity
dotcom.
So these are going to be the top three recommended websites for bug bounty hunting.
There's actually a ton more.
But as far as for the most recommended, these are going to be the top three.
And then we're going to go to my computer and I'm going to show you a quick walkthrough overview of
the story.
Let's head on over to my computer now.
OK, so let's take a look at the top three recommended bounty websites.
The number one here is hacker one.
This is the number one here.
And you can look up here and look at the different products that they have, how you can get paid from
various services.
And your role really here is to, like I mentioned, to get paid for finding vulnerabilities within
a company's networks, essentially right.
In their applications, whatever that may be here.
So you have like a pin test here and then you can do bug bounty hunting here and then also provide various
services.
So definitely recommend you check this out here and then let's go to the next one.
Then we have the bug crowd.
And this is essentially the same thing where you're finding vulnerabilities in systems.
You can actually request a demo here.
You can look at how it works.
They have a good chat here.
And so, again, this is something for if you're wanting to get paid for just finding these different
bugs within organizations and then getting paid for it, if you don't want to do any of the actual client
facing work.
And then we have the integrity dot com here and this one is in Europe, OK?
And so as you can see, there's pretty much the same thing here.
You can request a demo.
You can look at some of the other individuals that have used this as well.
So even if you, you know, maybe don't decide to do this, I would definitely sign up and to all three
of these and maybe do some exploring and find out what it all entails and if it's something that you
actually want to do, even just for practice.
Right.
So as you can see here, you're a researcher or you're a company regardless of, you know, what your
ultimate intention is.
You want to get an idea as far as how the bug bounty hunting works when you get into the cybersecurity
space, unless you're just focusing in on a particular area.
So maybe you're focused on just compliance, you most likely wouldn't be doing very much bug bounty
hunting.
So I'd like to look at it from the perspective of getting a, you know, broad kind of experience.
Right.
And kind of dipping your toes into different areas within the cybersecurity field and then going into
which ones as far as the fields that resonate and connect more with you.
OK, so that's going to be here for this one.
And we'll see you on the next one.