Hacking Binance (Part 1) - Recon & Enumeration
Hello and welcome back to the channel everybody! For today's video, we're focusing on reconnaissance.
Our target for this video is the Binance bug bounty program on Bugcrowd. We chose Binance because it's a massive company with a significant digital footprint, increasing the probability of finding bugs for bug bounty hunters!
First, we will explore the scope of the program, ensuring we stay within the boundaries of *.binance.com. Then, we will start enumerating subdomains and gather data about these subdomains using powerful tools like SpyHunt, HTTPX, Feroxbuster, and Nmap.
Disclaimer: This video is for educational purposes only. Always ensure you have explicit permission to test any system or network and adhere to legal and ethical guidelines. Unauthorized hacking is illegal and unethical, so please don’t be that person.
With all that out of the way, let's dive into the video!
Tools Used:
SpyHunt: For subdomain enumeration.
HTTPX: To probe for live subdomains.
Feroxbuster: For directory and file fuzzing.
Nmap: To scan for open ports and services.
In this video, you'll learn:
How to effectively enumerate subdomains of a large target.
How to use advanced tools for gathering and analysing recon data.
Tips and tricks for a successful bug bounty reconnaissance phase.
If you enjoyed this video and found it informative, please give it a thumbs up, subscribe to the channel, and hit the notification bell so you don't miss our next cybersecurity tutorial.
Thank you for watching, and happy hacking! Simon & Clint
#CyberSecurity #BugBounty #Reconnaissance #Binance #EthicalHacking #PenetrationTesting #CyberSecTools #Nmap #SpyHunt #HTTPX #Feroxbuster #Bugcrowd