Bug bounties
Hunt real targets: recon, scoping, and reports that pay.
- 001 Getting started in bug bounty How bug bounty works, the mindset, and how to read a program's scope.
- 002 Recon and scoping Map a target's attack surface — subdomains, content, parameters, and stack.
- 003 Writing a report that pays A good report is half the work — clear repro, real impact, and a fix.
- 004 Choosing a beginner program Learn Choosing a beginner program through a safe, repeatable bug bounties workflow.
- 005 Scope reading checklist Learn Scope reading checklist through a safe, repeatable bug bounties workflow.
- 006 Passive recon workflow Learn Passive recon workflow through a safe, repeatable bug bounties workflow.
- 007 Target note model Learn Target note model through a safe, repeatable bug bounties workflow.
- 008 Duplicate avoidance Learn Duplicate avoidance through a safe, repeatable bug bounties workflow.
- 009 Impact-first testing Learn Impact-first testing through a safe, repeatable bug bounties workflow.
- 010 Safe proof of concept design Learn Safe proof of concept design through a safe, repeatable bug bounties workflow.
- 011 Communicating with triage Learn Communicating with triage through a safe, repeatable bug bounties workflow.
- 012 Handling informative closures Learn Handling informative closures through a safe, repeatable bug bounties workflow.
- 013 Building a hunting routine Learn Building a hunting routine through a safe, repeatable bug bounties workflow.
- 014 Recon from program scope Learn Recon from program scope through a safe, repeatable bug bounties workflow.
- 015 ASN and netblock review Learn ASN and netblock review through a safe, repeatable bug bounties workflow.
- 016 Subdomain takeover triage Learn Subdomain takeover triage through a safe, repeatable bug bounties workflow.
- 017 JavaScript endpoint mining Learn JavaScript endpoint mining through a safe, repeatable bug bounties workflow.
- 018 Mobile app scope review Learn Mobile app scope review through a safe, repeatable bug bounties workflow.
- 019 Authentication bug bounty checklist Learn Authentication bug bounty checklist through a safe, repeatable bug bounties workflow.
- 020 Access control bug bounty checklist Learn Access control bug bounty checklist through a safe, repeatable bug bounties workflow.
- 021 SSRF bug bounty checklist Learn SSRF bug bounty checklist through a safe, repeatable bug bounties workflow.
- 022 File upload bug bounty checklist Learn File upload bug bounty checklist through a safe, repeatable bug bounties workflow.
- 023 Business logic bug bounty checklist Learn Business logic bug bounty checklist through a safe, repeatable bug bounties workflow.
- 024 Race condition bounty workflow Learn Race condition bounty workflow through a safe, repeatable bug bounties workflow.
- 025 Report impact screenshots Learn Report impact screenshots through a safe, repeatable bug bounties workflow.
- 026 Safe data handling in reports Learn Safe data handling in reports through a safe, repeatable bug bounties workflow.
- 027 Retesting fixed reports Learn Retesting fixed reports through a safe, repeatable bug bounties workflow.
- 028 Building a target rotation Learn Building a target rotation through a safe, repeatable bug bounties workflow.
- 029 When to stop testing a program Learn When to stop testing a program through a safe, repeatable bug bounties workflow.