
Critical Thinking - Bug Bounty Podcast Episode 63: JHaddix Returns
15 snips
Mar 21, 2024 JHaddix, bug bounty hunting expert, discusses updates to The Bug Hunter's Methodology, threat intelligence, buying credentials from the dark web, new recon techniques, and integrating AI into workflows. The podcast touches on red teaming, FIS hunting, and personal hacking journey insights.
AI Snips
Chapters
Transcript
Episode notes
Modern Red Teaming Techniques
- Red teaming involves emulating real-world adversaries and bypassing security measures.
- Techniques like DLL sideloading and obfuscation are used to evade detection.
Dark Web Credentials for Red Teaming
- Jason Haddix successfully used dark web credentials in red team engagements.
- He obtained credentials from Telegram and Discord channels.
Customer Perspective in Bug Bounty
- Consider the customer's perspective in bug bounty.
- Understand their risk tolerance and how they handle vulnerabilities.
