How to get experience with no experience? Have a look at bug bounty programs. Vickie Li demos Insecure Direct Object References (IDOR) and tells us how to get into bug bounty. We also discuss why her book Bug Bounty Bootcamp is a fantastic book to buy if you want to get into bug bounty. Get real world experience today.

// MENU //
00:00 - In plain text!
00:24 - Introducing//Vickie Li
00:58 - Part 1//The Interview
01:01 - Origin//Bug Bounty Bootcamp
03:37 - What are Bug Bounty Programmes?
05:26 - Part Time Bug Hunting?
05:44 - Easy Way to Get Experience
07:45 - Which Bug Bounty Programmes for Beginners?
10:51 - Beginners//Don't Compete with Pros
13:15 - Duplicates as Valid Experience
14:23 - What You Need to Start
14:59 - Linux//Do You Need It?
15:55 - Automate!//Which Programming Language?
18:03 - Beginner Friendly Vulnerabilities
21:17 - Part 2//Exploiting IDOR Vulnerability Demo
21:24 - What is IDOR?
22:51 - PortSwigger IDOR Lab
24:05 - Live Chat IDOR
24:48 - View transcript
25:12 - Burp Suite Intercept
26:05 - What to Look For//IDs Aren't Always Obvious
26:56 - Burp Suite//Looking Through Headers
27:56 - Burp Suite//Repeater
28:30 - Testing View Transcript Again
29:18 - GET Request//Identifying Exploitable Endpoint
30:26 - Modifying GET Request
31:35 - Finding the right headers to modify
33:47 - Why the first attempt didn't work
34:09 - IRL//What You Would Do
34:23 - Password in Live Chat Transcript
35:40 - How to Prevent IDORs
36:01 - IDORs//Worth Pursuing?
39:57 - Bug Bounties//How to Start
41:21 - Learn More!//Vickie's Blog
41:38 - Follow Vickie's Twitter!
41:52 - Thank You & Closing

// Books //
Bug Bounty Bootcamp: https://amzn.to/3K2YDeJ
The Web Application Hacker's Handbook: https://amzn.to/3IZ2RTr
Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E 
Alice and Bob learn application security by Tanya Janca: https://amzn.to/3oMyMij
Automate the boring stuff with Python: https://amzn.to/3N2QuYu

// Videos mentioned //
Nahamsec: https://youtu.be/9vaEwycet90
Corey Ball: https://youtu.be/CkVvB5woQRM
Tanya Janca: https://youtu.be/nyhytT2tRN0
Al Sweigart: https://youtu.be/7iBqoc-DzTQ

// Vickie's social media //
Twitter: https://twitter.com/vickieli7
Website: https://vickieli.dev/
YouTube: https://www.youtube.com/channel/UCjQH...
Medium: https://vickieli.medium.com/

// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal 

// Platforms mentioned //
HackerOne: https://www.hackerone.com/
bugcrowd: https://www.bugcrowd.com/
Intigriti: https://www.intigriti.com/
Huntr: https://huntr.dev/

// Connect with Nahamsec //
Twitter: https://twitter.com/nahamsec
YouTube: https://www.youtube.com/c/nahamsec
Github: https://github.com/nahamsec/Resources...
Discord: https://discord.com/invite/ysndAm8
Instagram: https://www.instagram.com/nahamsec/
LinkedIn: https://www.linkedin.com/in/nahamsec/
Twitch: https://www.twitch.tv/nahamsec
Website: https://nahamsec.com/

// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#python #hack #xss

#401: Bug Bounty bootcamp // Get paid to hack websites like Uber, PayPal, TikTok and more

This is your FREE path to becoming a master programmer! Use the links below to learn Python, C, Django, PostgreSQL and web programming for free! :)

// Menu //
00:00 - Intro
01:24 - Dr Chuck's Courses
02:24 - Path to Master Programmer
07:00 - Path to Master Programmer Languages
10:41 - How to Get the Courses
14:24 - How Python Changed the World
15:42 - Do You Need a Degree?
18:01 - Financial Aid
19:39 - Conclusion

// Previous video //
Computer Science isn't programming: https://youtu.be/z3o6yEzcnLc
Best programming language ever: https://youtu.be/aQ_XTBmCXS8
 
// C for Everybody Course //
Free C Programming Course https://www.cc4e.com/
Free course on YouTube: https://www.youtube.com/watch?v=XteaW...
 
// C book Audio by Dr Chuck //
https://www.cc4e.com/podcast

// Python for Everybody //
Python for Everybody: https://www.py4e.com/
Python for Everybody on Coursera: https://www.coursera.org/specializati...
YouTube: https://youtu.be/8DvywoWv6fI
Free Python Book: http://do1.dr-chuck.com/pythonlearn/E...
Dr Chuck's Website: https://www.dr-chuck.com/
Free Python Book options: https://www.py4e.com/book
 
// Django for Everybody //
Django for Everybody: https://www.dj4e.com/
Django for Everybody for on Coursera: https://www.coursera.org/specializati...
YouTube: https://youtu.be/o0XbHvKxw7Y
 
// PostgreSQL for Everybody // 
PostgreSQL for Everybody: https://www.pg4e.com/
PostgreSQL for Everybody on Coursera: https://www.coursera.org/specializati...
YouTube: https://www.youtube.com/watch?v=flRUu...
 
// Web Applications for Everybody //
YouTube: https://youtu.be/xr6uZDRTna0
Web Applications for Everybody: https://www.wa4e.com/
Web Applications for Everybody on Coursera: https://www.coursera.org/specializati...
YouTube: https://www.youtube.com/watch?v=tuXyS...
 
// Books //
The C Programming Language by Brian Kernighan and Dennis Ritchie (the 1984 Second Ed and 1978 First Ed): https://amzn.to/3G0HSkU

// MY STUFF //
https://www.amazon.com/shop/davidbombal
 
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
 
// Dr Chuck Social //
Website: https://www.dr-chuck.com/
Twitter: https://twitter.com/drchuck/
YouTube: https://www.youtube.com/user/csev
Coursera: https://www.coursera.org/instructor/d...

c
rust
c vs rust
c course
free c course
Python
C
Django
SQL
PostgreSQL
PHP
MySQL
jQuery
CSS
best programming language
python
python course
python for beginners
master programmer
dr chuck
dr chuck master programmer
python mentorship
google code interview
google interview
computer science
python best course
dr chuck python
dr chuck python course
learn to code
software development
software developer
computer science
software engineer
software engineering
how to learn programming
free python course
free python course online
free python class
free python tutorial
free python training
how to learn to code
coding tutorials
how to code
learning to code
learn to code for free
learn to code python
python jobs
coding bootcamp
google code interview
python for beginners
python full course
python tutorial
python projects
python basic tutorial
 python programming
python interview questions
python course
python basics
open source

#python #javascript #drchuck

#411: 2023 Path to Master Programmer (for free)

If you want to become a Pentester in 2023, then you should get your OSCP - this is what a lot of experts I interview recommend. The Official OSCP course (PEN-200: Penetration Testing with Kali Linux) recently got updated. I interview Jeremy Miller from OffSec about the changes.

Disclaimer: I was NOT paid for this interview. I wanted to make this video because it affects many of you watching and I would have done it without receiving anything from OffSec. However, they did give me access to Learn One for one year so I could see the course content. This has helped me prepare for the interview. Hopefully I'll be able to make more content covering what is in the PEN 200 course in future :)

// Documentation //
Changes: https://www.offsec.com/offsec/pen-200...
Course: https://www.offsec.com/courses/pen-200/

// Offsec //
Twitter: https://twitter.com/offsectraining
Website: https://www.offsec.com/
LinkedIn: https://www.linkedin.com/company/offs...

// Jeremy's SOCIAL //
Twitter: https://twitter.com/JeremyHarbinger
LinkedIn: https://www.linkedin.com/in/jeremy-mi...
Website: https://jeremyharbinger.com/

// David's SOCIAL //
Discord: https://discord.gg/davidbombal
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
00:00 - Coming up
00:28 - Intro
00:31 - Updated OffSec PEN-200 course for 2023 // What's changing?
05:22 - Hacking is not easy as it seems
07:46 - Preparing for the real world
10:19 - Pre-requisites for the course
14:15 - Jeremy's background // Journey to pentesting
21:13 - Approach with an open mind
22:41 - Learning models & challenges
28:10 - Feedback loop
30:16 - Buffer overflow explained 
32:34 - What has been removed & added // PEN-200 updated
37:30 - What is "pedagogy"? // Changing ways to teach and learn
40:38 - The PEN-200 course and the OSCP exam
44:11 - Old and new OS available in PEN-200 course
46:04 - Things are changing but not everything
48:24 - OffSec subscriptions and contents
49:43 - Pros vs. Cons // Helping students understand
52:14 - Final words & conclusion

oscp
pen-200
offsec
offensive sercurity
pentest
pentester
hack
hacker
hacking
ethical hacking
ethical hacker course
ethical hacker

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only. 

#hacker #pentester #oscp

#421: The best Hacking Cert just got updated (OSCP PEN-200)

download jquery

 ❗️🗯❗️👉 👈❗️🗯❗️ Download File https://t.co/lYeAn5gnsk


How to Download jQuery: A Step-by-Step Guide


jQuery is one of the most popular and widely used JavaScript libraries in web development. It makes it much easier to use JavaScript on your website by providing a simple and intuitive API that works across different browsers. In this article, we will show you how to download jQuery from various sources and include it in your HTML document. We will also explain what jQuery is, why you should use it, and what features and benefits it offers.

 
What is jQuery and why use it?


jQuery is a lightweight, "write less, do more", JavaScript library that simplifies web development. It was created by John Resig in 2006 and has since become one of the most popular open-source projects on GitHub. According to W3Techs, as of June 2021, jQuery is used by 74% of all websites that use JavaScript.


jQuery takes a lot of common tasks that require many lines of JavaScript code to accomplish, and wraps them into methods that you can call with a single line of code. It also simplifies a lot of the complicated things from JavaScript, such as AJAX calls and DOM manipulation.


jQuery offers many features and benefits, such as:


Cross-browser compatibility


jQuery handles the differences between browsers and ensures that your code works consistently on all major browsers, such as Chrome, Firefox, Safari, Edge, IE, etc. You don't have to worry about writing browser-specific code or testing your code on different browsers.


Easy DOM manipulation and event handling


jQuery makes it easy to select, modify, add, or remove elements from the HTML document using CSS selectors. You can also attach or detach event handlers to elements using a simple syntax. For example, you can hide all 
p
 elements with a single line of code:


$("p").hide();


Built-in effects and animations


jQuery comes with a number of pre-built effects and animations that you can apply to elements with ease. You can also create custom animations using the 
animate()
 method. 
For example, you can fade out all 
div
 elements with a single line of code:


$("div").fadeOut();


AJAX support and utilities


jQuery makes it easy to send and receive data from a server using AJAX (Asynchronous JavaScript and XML) without reloading the page. You can use the 
$.ajax()
 method or its shorthand versions, such as 
$.get()
, 
$.post()
, or 
$.getJSON()
, to make AJAX requests. You can also use jQuery's utility methods, such as 
$.each()
, 
$.map()
, or 
$.trim()
, to perform common tasks on arrays, objects, strings, etc.


Extensibility and plugins


jQuery is extensible, meaning that you can add your own methods and properties to the jQuery object using the 
$.fn.extend()
 or 
$.extend()
 methods. You can also use jQuery plugins, which are third-party libraries that extend jQuery's functionality. There are thousands of jQuery plugins available for various purposes, such as sliders, carousels, tabs, accordions, calendars, forms, etc. You can find and download jQuery plugins from websites like 
jQuery Plugins
 or 
jQuery UI
.


download jquery ui

download jquery min js

download jquery cdn

download jquery latest version

download jquery mobile

download jquery datepicker

download jquery validate

download jquery file

download jquery ajax

download jquery library

download jquery slider

download jquery ui css

download jquery ui min js

download jquery pdf

download jquery autocomplete

download jquery bootstrap

download jquery csv file

download jquery datatable

download jquery exce

Download jQuery and Boost Your Web Development Skills

A big shoutout to TCM Security for sponsoring this video. Register now to receive a 50% discount on your first month at the TCM Security Academy, potentially making your most significant step toward a career in ethical hacking.  Go here: https://davidbombal.wiki/3vQsqWm

Farah works at Meta and shares her amazing story of going from studying mass media, to hacking and now working at Meta. Did you know that Facebook and Meta have a bug bounty program that allows you to legally hack them and get paid? Go here:  

 / whitehat  

// Farah Hawa’s SOCIAL//
YouTube:    

 / @farahhawa  
LinkedIn:   

 / farah-hawa-a012b8162  
X:  https://x.com/farah_hawaa
Instagram:   

 / farah_hawaa  

// Resources REFERENCE //
YouTube videos:  
2023 Path to Hacking Success:    

 • 2023 Path to Hacking Success: Top 3 B...  
Bug Bounty:  Get paid to hack PayPal and TikTok // Featuring Nahamsec:    

 • Bug Bounty: Get paid to hack PayPal a...  
My updated bug bounty resources:    

 • my updated bug bounty resources  

YouTube channels:  thenewboston:    

 / @thenewboston  

Websites:
hackerone:  https://www.hackerone.com/
hacker101:  https://www.hacker101.com/
Burp Suite on PortSwigger:  https://portswigger.net/support/burp-...
PortSwigger Web Security Academy:  https://portswigger.net/web-security
Firefox Source Docs: https://developer.mozilla.org/en-US/
Pentester Land:  https://pentester.land/
Infosec:  https://infosec-conferences.com/
Vickie Li Blog:  https://vickieli.dev/
Subfinder:  https://github.com/projectdiscovery/s...
Sublist3r: https://github.com/aboul3la/Sublist3r
Frida:  https://frida.re/
Meta Bug Bounty Program:   

 / whitehat  

Books:
Real World Bug Hunting by Peter Yaworski
USA:  https://amzn.to/3JmRven
UK:  https://amzn.to/4d3S5M0

Bug Bounty Bootcamp by Vickie Li
USA:  https://amzn.to/3xGa4rz
UK:  https://amzn.to/49PwPa0

// David's SOCIAL //

Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com


Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#facebook #hack #hacking

#465: Next Gen Hackers protecting our world

Intro jingle for the Try JQuery course from Code School.

Try JQuery

Retrohandz - Loop - 007

Retrohandz - Loop - 006

Retrohandz - Loop - 003

Wir sprechen über die wichtigsten Webtechnologien und was sie machen. Darunter HTML, CSS, JavaScript und viele Andere.

S01E05 Webtechnologien

Freelance front-end developer, photographer, author and now podcaster from Hamburg, Germany.

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

Code School is an online learning destination for existing and aspiring developers that teaches through entertaining content.

Popular tracks tagged #jquery