Intro to Bug Bounty Hunting and Web Application Hacking

Insiders guide to ethical web hacking and bug bounty hunting with Ben Sadeghipour (@NahamSec)

Created by: Ben Sadeghipour
Hacker, Bug Bounty Hunter, Educator, & Content Creator

What Will I Learn?

• Engaging with a bug bounty program
• Basic understanding of web application hacking
• Basics of Reconnaissance (recon)
• How to approach a target
• Understand how bug bounties work
• Write better bug bounty reports
• Includes practical hands on labs to practice your skills
• Chain vulnerabilities for a higher impact
• Cross-Site Scripting (XSS)
• SQL Injection
• Server-Side Request Forgery (SSRF)
• Server-Side Vulnerabilities

Requirements

• Basic understanding of web technology
• Linux basics
• Reliable internet connection.
• A proxy tool such as as Caido, Burp Suite, or ZAP

Target audience

• Web developers
• Bug Bounty Hunters
• Red Teamer or offensive security engineers
• Developers looking to expand on their knowledge of vulnerabilities that may impact them
• Anyone interested in application security
• Beginner ethical hackers interested in web app hacking
• Anyone interested in offensive security
• Bug Bounty Hunters
• Beginners in cybersecurity