Missing HTTP Security Headers - Bug Bounty Tips

In this video we talk about various HTTP headers that can improve or weaken the security of a site. And we discuss how serious they are in the context of Google's bug bounty program.

Find the full playlist with videos for Google here: BUG HUNTER UNIVERSITY

Chapters:
00:00 - Background Info
03:11 - Intro
03:53 - HTTP Security Header Overview
04:38 - Example #1: X-Frame-Options
06:43 - Example #2: Content-Security-Policy (CSP)
08:16 - Example #3: Strict-Transport-Security (HSTS)
10:44 - Example #4: Cross-Origin Resource Sharing (CORS)
13:12 - Example #5: Cookie Security Flags (HttpOnly)
14:25 - Summary
15:23 - Outro

*advertisement because the video was originally produced for Google: https://bughunters.google.com/learn/v...

=[ ❤️ Support ]=

→ per Video: Patreon: liveoverflow
→ per Month: @liveoverflow

=[ 🐕 Social ]=

→ Twitter: Twitter: LiveOverflow
→ Instagram: Instagram: LiveOverflow
→ Blog: https://liveoverflow.com/
→ Subreddit: Reddit: LiveOverflow
→ Facebook: Facebook: LiveOverflow

• #education
• #live_overflow
• #liveoverflow
• #hacking_tutorial
• #how_to_hack
• #exploit_tutorial
• #bug_bounty
• #http_headers
• #security_headers
• #csp
• #cors
• #cors_misconfiguration
• #withcredentials
• #xss
• #csrf
• #hsts
• #missing_security_headers
• #bug_bounty_impact
• #google_vrp
• #google_bug_bounty
• #bugbounty