venerdì 26 gennaio 2024

How Do I Get Started With Bug Bounty ?

How do I get started with bug bounty hunting? How do I improve my skills?



These are some simple steps that every bug bounty hunter can use to get started and improve their skills:

Learn to make it; then break it!
A major chunk of the hacker's mindset consists of wanting to learn more. In order to really exploit issues and discover further potential vulnerabilities, hackers are encouraged to learn to build what they are targeting. By doing this, there is a greater likelihood that hacker will understand the component being targeted and where most issues appear. For example, when people ask me how to take over a sub-domain, I make sure they understand the Domain Name System (DNS) first and let them set up their own website to play around attempting to "claim" that domain.

Read books. Lots of books.
One way to get better is by reading fellow hunters' and hackers' write-ups. Follow /r/netsec and Twitter for fantastic write-ups ranging from a variety of security-related topics that will not only motivate you but help you improve. For a list of good books to read, please refer to "What books should I read?".

Join discussions and ask questions.
As you may be aware, the information security community is full of interesting discussions ranging from breaches to surveillance, and further. The bug bounty community consists of hunters, security analysts, and platform staff helping one and another get better at what they do. There are two very popular bug bounty forums: Bug Bounty Forum and Bug Bounty World.

Participate in open source projects; learn to code.
Go to https://github.com/explore or https://gitlab.com/explore/projects and pick a project to contribute to. By doing so you will improve your general coding and communication skills. On top of that, read https://learnpythonthehardway.org/ and https://linuxjourney.com/.

Help others. If you can teach it, you have mastered it.
Once you discover something new and believe others would benefit from learning about your discovery, publish a write-up about it. Not only will you help others, you will learn to really master the topic because you can actually explain it properly.

Smile when you get feedback and use it to your advantage.
The bug bounty community is full of people wanting to help others so do not be surprised if someone gives you some constructive feedback about your work. Learn from your mistakes and in doing so use it to your advantage. I have a little physical notebook where I keep track of the little things that I learnt during the day and the feedback that people gave me.


Learn to approach a target.
The first step when approaching a target is always going to be reconnaissance — preliminary gathering of information about the target. If the target is a web application, start by browsing around like a normal user and get to know the website's purpose. Then you can start enumerating endpoints such as sub-domains, ports and web paths.

A woodsman was once asked, "What would you do if you had just five minutes to chop down a tree?" He answered, "I would spend the first two and a half minutes sharpening my axe."
As you progress, you will start to notice patterns and find yourself refining your hunting methodology. You will probably also start automating a lot of the repetitive tasks.

Continue reading


  1. Hacker Tools Hardware
  2. Black Hat Hacker Tools
  3. Best Hacking Tools 2019
  4. What Are Hacking Tools
  5. Hacking Tools And Software
  6. Hacking Tools Usb
  7. Easy Hack Tools
  8. Termux Hacking Tools 2019
  9. Pentest Tools Alternative
  10. Top Pentest Tools
  11. Hacking Tools And Software
  12. Pentest Tools For Ubuntu
  13. Hack App
  14. Nsa Hack Tools Download
  15. Black Hat Hacker Tools
  16. Hacker Tools Mac
  17. Pentest Tools Open Source
  18. Hacker Tools Software
  19. Hacking Tools Pc
  20. Hack Tools Github
  21. Hacking App
  22. Physical Pentest Tools
  23. Install Pentest Tools Ubuntu
  24. Hacker Tools Software
  25. Hack Tools Github
  26. Pentest Tools Bluekeep
  27. Pentest Tools Framework
  28. Hacker Tools Apk Download
  29. Tools For Hacker
  30. Hacker Tools Hardware
  31. Hacking Tools For Windows
  32. Hack Tools For Ubuntu
  33. Nsa Hack Tools
  34. Pentest Recon Tools
  35. Hacker Tools Free
  36. New Hacker Tools
  37. Usb Pentest Tools
  38. Usb Pentest Tools
  39. Hacker Tools Software
  40. Hacking Tools For Beginners
  41. Pentest Tools Nmap
  42. Computer Hacker
  43. Hacker Hardware Tools
  44. Hack Tools Online
  45. Physical Pentest Tools
  46. Hack Tool Apk No Root
  47. Computer Hacker
  48. Pentest Tools Open Source
  49. Pentest Tools Review
  50. Bluetooth Hacking Tools Kali
  51. Pentest Tools For Windows
  52. Blackhat Hacker Tools
  53. Hacker Tools Free Download
  54. Hacking Apps
  55. Hack Tool Apk
  56. Hacking Tools Github
  57. Hacking Tools Mac
  58. Hackers Toolbox
  59. Hacking Tools Mac
  60. Pentest Tools Github
  61. Hacker Tools Apk Download
  62. Hacker Hardware Tools
  63. Hacking Tools Windows
  64. Pentest Tools Free
  65. Pentest Reporting Tools
  66. Tools For Hacker
  67. Hacker Tools Windows
  68. Easy Hack Tools
  69. Pentest Tools Website Vulnerability
  70. Pentest Tools Tcp Port Scanner
  71. Pentest Tools Windows
  72. Pentest Tools Website
  73. Pentest Tools Alternative
  74. Pentest Tools Linux
  75. Beginner Hacker Tools
  76. Black Hat Hacker Tools
  77. Nsa Hack Tools Download
  78. What Are Hacking Tools
  79. Kik Hack Tools
  80. Hack Tools For Ubuntu
  81. Hacking Tools
  82. Hack Website Online Tool
  83. Hacking Tools Download
  84. Usb Pentest Tools
  85. Hacking Tools Kit
  86. Pentest Tools Website Vulnerability
  87. Pentest Tools Github
  88. Tools Used For Hacking
  89. Hack Tools For Pc
  90. Hacker Tool Kit
  91. Hack Tools Github
  92. Termux Hacking Tools 2019
  93. Hacker Tools Apk
  94. Tools For Hacker
  95. Hacker Tools Software
  96. What Are Hacking Tools
  97. Hack Tools For Mac
  98. Hack Tool Apk No Root
  99. Pentest Box Tools Download
  100. Hacking Tools Windows 10
  101. How To Install Pentest Tools In Ubuntu
  102. Hackers Toolbox
  103. Hacking Tools Kit
  104. What Are Hacking Tools
  105. Pentest Recon Tools
  106. Pentest Tools Bluekeep
  107. Free Pentest Tools For Windows
  108. Pentest Tools For Windows
  109. Pentest Tools For Android
  110. Hacking Tools And Software
  111. Hacking Tools And Software
  112. Hacker Tool Kit
  113. Easy Hack Tools
  114. Termux Hacking Tools 2019
  115. Hacker Tools Online
  116. How To Make Hacking Tools
  117. Pentest Tools For Windows
  118. Hacking Tools Windows
  119. Hacker Tools Github
  120. New Hacker Tools
  121. Hack Tools For Mac
  122. Best Hacking Tools 2019
  123. Pentest Box Tools Download
  124. Hacking Tools Download
  125. Game Hacking
  126. Hacking Tools Pc
  127. Bluetooth Hacking Tools Kali
  128. Tools 4 Hack
  129. Pentest Tools Url Fuzzer
  130. Pentest Tools Online
  131. Hacking Tools Hardware
  132. How To Hack
  133. Hack Tools Pc
  134. Android Hack Tools Github
  135. Hacking Tools
  136. How To Make Hacking Tools
  137. Pentest Tools Kali Linux
  138. Pentest Tools Subdomain
  139. Hacker Security Tools
  140. Pentest Tools Nmap
  141. Hackers Toolbox
  142. Pentest Tools Open Source
  143. Hack Tools For Pc
  144. Hack Tools For Games
  145. Computer Hacker
  146. Pentest Reporting Tools
  147. Pentest Tools Nmap
  148. Install Pentest Tools Ubuntu
  149. Hacking Tools Usb
  150. Hacker Tools Linux
  151. Hack Tools For Pc
  152. Pentest Tools Port Scanner
  153. Physical Pentest Tools
  154. Pentest Tools Review
  155. Ethical Hacker Tools
  156. Pentest Automation Tools
  157. Hack Tools For Games
  158. Hacking Tools Kit
  159. Blackhat Hacker Tools
  160. Hacker Security Tools

Nessun commento:

Posta un commento