[sukabliat001]

well well well mr onzima, can i call you mr? thankioo my little ponie

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[defaulthuman1]

Thank you! These courses are best for newbies like me

[Rororo]

Hidden Content

Hi hello, I'm ssrf (also known as bugbounty), in this tutorial I'm going to show you how to get started with bug bounty from zero. 

Before we start, I want to make a simple promise: making money through bug bounty programs is not easy. Especially in the beginning, your reports may be rejected, and you might not be able to earn a substantial amount. If you are looking for quick and easy money, then this tutorial is not for you.

---

REQUIREMENTS
The requirements that I am about to list are crucial as they lay the foundation for developing a strong skill set to start your bug bounty journey

---

Networking 101  (Target: Gain a thorough understanding of the key network concepts essential for ethical hacking)

Alternatives: CCNA, Network+, this repository

---

 Programming (Target: Learn to code and develop small exploits using one or more programming languages)

Recommended languages: Python, SQL, PHP, Powershell, Bash, C, JavaScript, Rust)

---

 Linux Basics (Target: Learning the basics of Linux)

Alternatives: Linux+, LPI

---

PLATFORMS

Okay now let's talk about the different platforms to use. There are two types of bug bounty programs:

- Public bug bounty programs 

- Private bug bounty programs

Quite simply, public bug bounty programs are platforms open to everyone such as HackerOne, BugCrowd, Intigriti  (the last one is good only if you're in Europe).

---

Benefits:

Companies are obligated to compensate you if a valid vulnerability is discovered.
 You are more protected.

 You increase your networking and you can be contacted by companies to work with them

 You will be provided with a comprehensive scope encompassing all available domains (transparency) 

Reputation system.

---

Disadvantages:

 Due to the high volume of requests, companies may take a considerable amount of time to respond to you.

 It is possible that one of your reports may be rejected, even if your vulnerability is valid.

High competition

Bug bounty platforms break the direct connection between hackers and developers.

---

GENERAL RESOURCES

HackTricks

OWASP

This repository
This repository

PortSwigger

Pentestmonkey
Medium

---

COMMON VULNERABILITIES

XSS
SSRF
SQLi
CSRF
Misconfigurations
DNS Poisoning
IDOR
Race Condition
Deserialization
CRLF
LFI
LDAP

---

REPORTS

Learning how to write reports is very important for companies to understand the seriousness of the problem.

---

Templates from HackerOne
Templates from BugCrowd
Templates from Intigriti

---

Good luck hackers. If you have any questions, please ask below 
Telegram: @raswgg (or click here)

[oletus]

I came across this one MEGA link once, I wonder if this is the same. Shame I didn't save that link

Thanks anyway.

[Heyhacker]

Thank u its amazing

[escooby]

Saaaaans , gr8 , thanks.

[jonathanhemry]

thanks for sharing,i hope your content is good

[Lejonmanh]

thanks for sharing this with us!

[lifeprogrammer]

thanks youuuu broski

[online144]

thanks for the resources