In the previous video, I told you that I will show you some of the websites which help you to earn
some money by hacking into websites.
Now, keep in mind, this is not a bad one because my is a general cyber security course.
But I am sharing this knowledge with you in order to make you aware about the fact that you can earn
some money if you explore SQL injection attacks and exercice attacks to some advanced level.
Right.
So here is the first website, which is yes, we had dot com, which itself says be a reward, not a
ransom.
So the owner of the websites themselves offer their websites to security researchers or to testers in
order to find some bugs, some weaknesses in their website.
Right.
So that they will increase the security of their website and prevent from external attacks.
The next website is open book Boundy.
OK, here, as the name suggests, it is open for all.
OK, so any of the security researcher will hack into any of the websites they provide you and in return
you will get a reward, right?
See, I told you that you can use a skill addiction attack and exercise attacks in order to earn some
bounty, but if you use dose and dose attacks, then the owner of the website will block you and will
never pay you a bounty because they know that the in those attacks will work in most of the cases.
Right.
In approximately all of the cases.
That's the reason they are not interested in goes into those attacks.
OK, now the next website is Heckel one dot com.
This website is a little bit different from open book, but maybe this website will give you some challenges
like capture the flag challenges and then you earn some points by passing them.
Then you will be invited for private problems where the owner of the website will allow you to hack
into websites to only a limited number of protesters.
OK, so these websites are not open to all.
So your competition gets reduced, but the challenge will be hard.
OK, so the next website is Boxgrove dot com.
OK, again, it is also a bug bounty platform so you can create account with them and can earn some
real reward.
OK, only if you get a weakness in their website.
Now you have to prepare a basic report like name of the vulnerability, the attack you have used, like
you have used Exeter's attacks.
Then you have to provide the urine and the input parameter field because whenever you send a report,
they will first verify it, OK?
They will dry themselves that whether the thing you are mentioning is correct or not.
OK, so if possible, you can create a video whenever you are trying to attack on their website as a
proof.
OK, so all you can also take screenshots, OK, and then explain them step by step procedure right
now.
Here is one more website, which is Hectorol dot com.
OK, so you can try one of these if you want, but it is better to first get a deep knowledge about
scale and exercise by practicing yourself and by using and measuring your creativity.
Now, if you notice in my previous videos, I'm using a single script, OK?
I'm using a very common script, which is a script alert.
One, two, three.
Right.
But that's not the only script.
We how many more scripts?
OK, so the one is not working.
Then we will try the other one.
OK, then we will try the third one.
Right.
So let me open this link and let's open this one as well.
OK, so it says top five most important exercises, scripts.
OK.
So here you will find a list of scripts.
OK, so you have to try a single script at a time.
OK.
And I think it is very time consuming process.
OK, it's not possible.
I know it's possible, but it is an ongoing process.
So that's not possible for an expert to try every single script manually.
OK, so in the next video, I will show you how you can automate the process, OK, and save your time
and energy.
Now, if you want to learn deeper about this, then you can visit this website or w dot org.
It is always a great website for increasing knowledge.
OK, you can read it if you want.
Right.