What the Hack: A Personal Story about Ethical Hacking • Ben Sadeghipour @NahamSec • GOTO 2022

This presentation was recorded at GOTO Copenhagen 2022. #GOTOcon #GOTOcph http://gotocph.com Ben Sadeghipour - VP of Research at Hadrian Security @NahamSec ORIGINAL TALK TITLE What the Hack? RESOURCES https://twitter.com/nahamsec https://www.linkedin.com/in/nahamsec https://github.com/nahamsec https://nahamsec.com ABSTRACT Join Ben Sadeghipour in this session. He is Head of Hacked Education at HackerOne by day, and a hacker by night. Ben has helped identify and exploit over 600 security vulnerabilities across 100+ of web and mobile applications for companies such as Yahoo, Google, Airbnb, Snapchat, The US Department of Defense, Yelp, and more. [...] TIMECODES 00:00 Intro 03:45 What is bug bounty? 07:03 Personal stories & hacker profiles 07:20 The full timer 07:55 dawgyg 10:19 Mayonaise 11:51 zlz 13:34 The academic 14:29 Jack Cable 15:39 Dee-See 16:42 The Careerist 18:43 Yaworsk 20:18 Teknogeek 21:14 The moonlighter 21:39 ziot 23:12 Bug bounty content creators 24:47 Books & other resources 31:26 NahamSec 37:46 Summary 40:07 Outro Read the full abstract here: https://gotocph.com/2022/sessions/2190/what-the-hack RECOMMENDED BOOKS Peter Yaworski • Real-World Bug Hunting • https://amzn.to/3Y0368p Vickie Li • Bug Bounty Bootcam • https://amzn.to/3IAExdE Carlos A. Lozano & Shahmeer Amir • Bug Bounty Hunting Essential • https://amzn.to/3XIx2Wo Sanjib Sinha • Bug Bounty Hunting for Web Security • https://amzn.to/3YO44Wu Jim Manico & August Detlefsen • Iron-Clad Java • https://amzn.to/3qGqwBw Liz Rice • Container Security • https://amzn.to/3oU4iJe Liz Rice • Kubernetes Security • https://www.oreilly.com/library/view/kubernetes-security/9781492039075 Aaron Parecki • OAuth 2.0 Simplified • https://amzn.to/2A3IMOf Aaron Parecki • OAuth 2.0 Servers • https://amzn.to/3ecHEsz Aaron Parecki • The Little Book of OAuth 2.0 RFCs • https://amzn.to/3i7qnlC Erdal Ozkaya • Cybersecurity: The Beginner's Guide • https://amzn.to/2T6OIj3 https://twitter.com/GOTOcon https://www.linkedin.com/company/goto- https://www.facebook.com/GOTOConferences #Hacker #Hacking #Hack #WhiteHat #WhiteHatHacker #Security #Cybersecurity #CybersecurityTutorial #WebSecurity #Vulnerabilities #Vulnerability #HackerOne #BenSadeghipour #HadrianSecurity #BugBounty #BugBountyTips #HackerOneElite #CTF Looking for a unique learning experience? Attend the next GOTO conference near you! Get your ticket at https://gotopia.tech Sign up for updates and specials at https://gotopia.tech/newsletter SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily. https://www.youtube.com/user/GotoConferences/?sub_confirmation=1