Go offline with the Player FM app!
#17 Unpacking Bug Bounty Strategies with RootSploit: Zero Days, Recon, and Vulnerabilities
Manage episode 445399046 series 3583577
Cybersecurity professionals Kyser Clark and Pranit Garud (RootSploit) discuss their experiences in the field. They cover topics such as bug bounty programs, the role of an offensive security engineer, and the differences between consulting and working for a Fortune 500 company. Pranit shares tips for getting started in bug bounty hunting and emphasizes the importance of understanding the business logic of a company. He also highlights the need for a mindset shift when transitioning from consulting to an internal security role.
Connect with Pranit on LinkedIn: https://www.linkedin.com/in/pranit-garud/
Takeaways
- Bug bounty hunting requires a proactive and research-oriented mindset, as well as a deep understanding of the target company's technologies and business logic.
- Working as an offensive security engineer in a Fortune 500 company offers the opportunity to see the inner workings of the organization and make a greater impact on security.
- Transitioning from consulting to an internal security role requires a shift in focus from exploitation to securing and collaborating with developers.
- Building a close relationship with developers and understanding their challenges can lead to more effective security measures.
- The pace of work in a Fortune 500 company may be slower due to approval processes and the need for careful consideration of potential impacts.
Connect
---------------------------------------------------
https://www.KyserClark.com
https://www.KyserClark.com/Newsletter
https://youtube.com/KyserClark
https://www.linkedin.com/in/KyserClark
https://www.twitter.com/KyserClark
https://www.instagram/KyserClark
https://facebook.com/CyberKyser
https://twitch.tv/KyserClark_Cybersecurity
https://www.tiktok.com/@kyserclark
https://discord.gg/ZPQYdBV9YY
Music by Karl Casey @ White Bat Audio
Attention Listeners: This content is strictly for educational purposes, emphasizing ETHICAL and LEGAL hacking only. I do not, and will NEVER, condone the act of illegally hacking into computer systems and networks for any reason. My goal is to foster cybersecurity awareness and responsible digital behavior. Please behave responsibly and adhere to legal and ethical standards in your use of this information.
Opinions are my own and may not represent the positions of my employer.
Chapters
1. Introductions (00:00:00)
2. Rapid Fire Questions (00:04:37)
3. Why is learning both exciting and challenging? (00:06:53)
4. CRAC Learning Community (00:09:09)
5. How to get started with Bug Bounty (00:11:43)
6. How to select a Bug Bounty Program (00:15:18)
7. How to Avoid Duplicate Findings (00:19:46)
8. What it's like being a Fortune 500 Ethical Hacker (00:25:09)
9. Final Hot Take and Wisdom (00:35:19)
53 episodes
Manage episode 445399046 series 3583577
Cybersecurity professionals Kyser Clark and Pranit Garud (RootSploit) discuss their experiences in the field. They cover topics such as bug bounty programs, the role of an offensive security engineer, and the differences between consulting and working for a Fortune 500 company. Pranit shares tips for getting started in bug bounty hunting and emphasizes the importance of understanding the business logic of a company. He also highlights the need for a mindset shift when transitioning from consulting to an internal security role.
Connect with Pranit on LinkedIn: https://www.linkedin.com/in/pranit-garud/
Takeaways
- Bug bounty hunting requires a proactive and research-oriented mindset, as well as a deep understanding of the target company's technologies and business logic.
- Working as an offensive security engineer in a Fortune 500 company offers the opportunity to see the inner workings of the organization and make a greater impact on security.
- Transitioning from consulting to an internal security role requires a shift in focus from exploitation to securing and collaborating with developers.
- Building a close relationship with developers and understanding their challenges can lead to more effective security measures.
- The pace of work in a Fortune 500 company may be slower due to approval processes and the need for careful consideration of potential impacts.
Connect
---------------------------------------------------
https://www.KyserClark.com
https://www.KyserClark.com/Newsletter
https://youtube.com/KyserClark
https://www.linkedin.com/in/KyserClark
https://www.twitter.com/KyserClark
https://www.instagram/KyserClark
https://facebook.com/CyberKyser
https://twitch.tv/KyserClark_Cybersecurity
https://www.tiktok.com/@kyserclark
https://discord.gg/ZPQYdBV9YY
Music by Karl Casey @ White Bat Audio
Attention Listeners: This content is strictly for educational purposes, emphasizing ETHICAL and LEGAL hacking only. I do not, and will NEVER, condone the act of illegally hacking into computer systems and networks for any reason. My goal is to foster cybersecurity awareness and responsible digital behavior. Please behave responsibly and adhere to legal and ethical standards in your use of this information.
Opinions are my own and may not represent the positions of my employer.
Chapters
1. Introductions (00:00:00)
2. Rapid Fire Questions (00:04:37)
3. Why is learning both exciting and challenging? (00:06:53)
4. CRAC Learning Community (00:09:09)
5. How to get started with Bug Bounty (00:11:43)
6. How to select a Bug Bounty Program (00:15:18)
7. How to Avoid Duplicate Findings (00:19:46)
8. What it's like being a Fortune 500 Ethical Hacker (00:25:09)
9. Final Hot Take and Wisdom (00:35:19)
53 episodes
All episodes
×
1 #52 The Ultimate Hacking Wisdom Compilation 26:43

1 #51 Q&A: Why YouTube Took Down My Wi-Fi Hacking Video 27:29

1 #50 No OSCP. No Degree. Still Landed a Red Team Job ft. Richie Vinson (4NU81X7H3H4CK3r) 39:24

1 #49 He Found Vulnerabilities in His Own Code: Then Made a Career Out of It ft. John Kounelis 41:06

1 #48 He Got Hired Without Knowing the Answer: Here’s Why ft. Michael Kim 38:28

1 #47 Q&A: Feel Lost Watching Hacking Videos? Listen to This 32:00

1 #46 She Started Coding at 13 and Never Looked Back ft. Betta Lyon Delsordo 39:49

1 #45 OSWA Grind: 24 Hours. No Sleep. One Last Flag ft. Pratham Shah 35:16

1 #44 How to Hack What No One Teaches ft. Noah Pack 33:17

1 #43 Grind Now, Relax Later: The Harsh Reality of Breaking Into Cybersecurity ft. Matthew Younker (Zumi Yumi) 34:29

1 #42 Certifications, College, or Bootcamps — What’s Worth It in Cybersecurity? ft. Channa Rajaratne 39:31

1 #41 How to Actually Become a Great Pentester 38:25

1 #40 Proof You Don’t Need a Degree to Succeed in Cybersecurity ft. Zach Winchester 39:37

1 #39 Q&A: Struggling with Burnout? Here’s Why It Might Be a Good Thing 39:15

1 #38 Fired or Freed? Turning a Cybersecurity Layoff into Your Next Big Break w Justin Mahon 39:17
Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.