NahamSec Teaches Me Bug Bounty Basics

NahamSec Teaches Me Bug Bounty Basics

by John Hammond

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 John Hammond 👥 2.2M 📅 March 13, 2026 ⏱ 30 min 👁 40K 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

bug bountyHackerOneBugcrowdreconnaissancevulnerability hunting

Summary

In this video, John Hammond invites NahamSec (Ben) to explain the fundamentals of bug bounty hunting. Ben emphasizes that success depends on deep knowledge of vulnerability types, curiosity, and passion, rather than just chasing monetary rewards. He outlines the major bug bounty platforms (HackerOne, Bugcrowd, Integrity, YesWeHack) and advises beginners to start with Vulnerability Disclosure Programs (VDPs) to practice without pressure. Ben demonstrates how to use HackerOne’s directory to filter programs that offer bounties and highlights key metrics like payout amounts, historical payouts, and scope size. He uses Netflix as an example of a good target due to its large attack surface and active bounty payouts. The discussion covers reconnaissance techniques, including subdomain enumeration and using reverse WHOIS to discover related domains, as illustrated with Red Bull. Ben shares personal anecdotes, such as a blind XSS payload that fired after seven years, and emphasizes the importance of understanding a company’s threat model. He also mentions common vulnerabilities like XSS and IDOR, and the need for patience in testing many inputs. The video concludes with a live demo of a Red Bull bug that led to remote code execution, showcasing the practical application of the discussed methods.

196 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable, practical insights for beginners and intermediate hackers, offering a clear roadmap for starting bug bounty hunting. Ben’s argumentation is solid, grounded in his extensive experience as a former HackerOne employee and active hunter. He supports his points with concrete examples, such as the Netflix program and the Red Bull recon, making the advice actionable. The emphasis on mindset (curiosity, passion) and methodology (program selection, recon) is well-argued and credible.

Scientific Rigor, Source Quality, Title Accuracy

The video is scientifically rigorous in the sense that it relies on the expert’s direct experience and industry knowledge, but it lacks formal citations or references to external research. The sources mentioned are primarily platforms (HackerOne, Bugcrowd) and tools (Subfinder, HTTPX), which are appropriate for the topic. The title accurately reflects the content, and the video stays on-topic throughout. No comments were provided for analysis.

153 words

Title / Content Match

The title accurately reflects the content: NahamSec teaches John Hammond the basics of bug bounty hunting, covering platforms, program selection, and reconnaissance.

Quality & Reliability

8/10

The video features an experienced bug bounty hunter (NahamSec) sharing practical advice and real-world examples, with a clear methodology for selecting programs and conducting recon. The content is based on personal experience and industry knowledge, but lacks formal citations or peer-reviewed sources, and some claims are anecdotal.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • HackerOne Directory — NahamSec demonstrates using the HackerOne directory to find bug bounty programs.
  • Bugcrowd — Mentioned as one of the major bug bounty platforms.
  • Integrity — Mentioned as a major bug bounty platform, especially for European brands.
  • YesWeHack — Mentioned as a major bug bounty platform.
  • Woxy — Used for reverse WHOIS lookup to find related domains.
  • Subfinder — Used for subdomain enumeration.
  • HTTPX — Used for probing subdomains and gathering technology information.
  • ProjectDiscovery Chaos — Mentioned as a source for subdomain data.

Concurring Sources

  • HackerOne Hacktivity — Shows real-world bug bounty reports and payouts, supporting the video's claims about active programs.
  • Bugcrowd University — Provides educational content on bug bounty hunting, aligning with the video's advice.

External References

Contribution & Novelties

The video offers a practical, experience-based guide to bug bounty hunting, emphasizing the importance of mindset and methodology over mere tool usage. It provides a clear framework for selecting targets and conducting reconnaissance, illustrated with real-world examples. The live demo of finding an RCE on Red Bull adds concrete value.

Pour aller plus loin :

  • OWASP Top Ten — Essential list of common web vulnerabilities.
  • Bug Bounty Hunting Methodology — HackerOne’s resources on hacking techniques.
  • Reconnaissance Techniques — PortSwigger’s research on web security and recon.
  • Subdomain Enumeration — OWASP cheat sheet on subdomain enumeration.

94 words

Radar Profile

The radar profile shows high scores in information quantity and quality, with moderate technical depth and reliability. This indicates a well-rounded educational video that is accessible to beginners while still offering valuable insights for more experienced hackers.

Reliability 7/10