Uploaded September 2021 | Updated September 2026, 2 weeks ago

---

This video was created in collaboration with @PwnFunction and was commissioned by Google VRP.

LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Join the Hextree Discord: discord.gg/xgQpCQCpvy

Check out @PwnFunction's excellent YouTube channel!

Read the article here: bughunters.google.com/learn/improving-your-reports/avoiding-mistakes/6082745027264512

CHAPTERS
00:00 - The rejected Google database report
00:42 - Google infrastructure versus customer assets
02:39 - Verify who controls a service before reporting
03:04 - Identifying customer IPs with WHOIS
03:25 - Comparing GCP and Google service addresses
04:48 - Key takeaways for bug hunters
05:19 - Why the original report was invalid

SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com

WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog

#BugBounty #SecurityResearch #LiveOverflow

(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.