Start Hacking at Hacker One - Learn Bug Hunting & Get Paid Legally

Value of the Information & Strength of the Argument

The video provides practical, hands-on demonstrations of five specific vulnerability types, which is valuable for beginners seeking actionable techniques. The presenter’s argumentation is based on his claimed experience as a top HackerOne hacker, but he does not provide verifiable evidence or references to support his claims. The strategic advice on focusing on medium/high impact bugs and avoiding duplicates is sound, but the reasoning is not deeply elaborated. The demos are clear and step-by-step, making the content accessible, but the explanations of the vulnerabilities’ root causes are superficial. The video does not discuss mitigation strategies or broader security concepts, limiting its educational value beyond the specific bugs shown.

Scientific Rigor, Source Quality, Title Accuracy

The video does not cite any external sources or references. The presenter mentions HackerOne’s statistics (e.g., $20 million earned by 2017, expected $100 million by 2020) but does not provide sources. The title accurately reflects the content, which is a beginner’s tutorial on bug hunting. The video includes a disclaimer about ethical hacking, but the lack of citations and reliance on anecdotal evidence reduces its scientific rigor. The presenter’s credentials are not verified, and no peer-reviewed or authoritative sources are referenced.

The title accurately reflects the content: a beginner's guide to bug hunting on HackerOne, covering five specific bugs with demos.

6/10

The video provides practical demonstrations of five specific vulnerability types, but lacks rigorous scientific sourcing and relies on anecdotal evidence. The presenter claims to be a top hacker on HackerOne, but no verifiable credentials are provided. The content is educational but not peer-reviewed.

• 00:00Introduction
• 10:13HackerOne: Your Big Opportunity
• 16:13Getting Started with 5 Bugs
• 24:19Automatic Leakage of Password Reset Link – Overview
• 29:31Automatic Leakage of Password Reset Link – Demo
• 35:23How to Get Access to the Account of the Logged Out User – Overview
• 39:01How to Get Access to the Account of the Logged Out User – Demo
• 44:57Insecure Processing of Credit Card Data – Overview
• 47:21Insecure Processing of Credit Card Data – Demo
• 52:24Disclosure of Authentication Cookie – Overview
• 55:59Disclosure of Authentication Cookie – Demo
• 1:03:03User Enumeration: Overview
• 1:06:33User Enumeration: Demo
• 1:10:54Summary & Next Steps