How Do I Get Started With Bug Bounty ?

How do I get started with bug bounty hunting? How do I improve my skills?



These are some simple steps that every bug bounty hunter can use to get started and improve their skills:

Learn to make it; then break it!
A major chunk of the hacker's mindset consists of wanting to learn more. In order to really exploit issues and discover further potential vulnerabilities, hackers are encouraged to learn to build what they are targeting. By doing this, there is a greater likelihood that hacker will understand the component being targeted and where most issues appear. For example, when people ask me how to take over a sub-domain, I make sure they understand the Domain Name System (DNS) first and let them set up their own website to play around attempting to "claim" that domain.

Read books. Lots of books.
One way to get better is by reading fellow hunters' and hackers' write-ups. Follow /r/netsec and Twitter for fantastic write-ups ranging from a variety of security-related topics that will not only motivate you but help you improve. For a list of good books to read, please refer to "What books should I read?".

Join discussions and ask questions.
As you may be aware, the information security community is full of interesting discussions ranging from breaches to surveillance, and further. The bug bounty community consists of hunters, security analysts, and platform staff helping one and another get better at what they do. There are two very popular bug bounty forums: Bug Bounty Forum and Bug Bounty World.

Participate in open source projects; learn to code.
Go to https://github.com/explore or https://gitlab.com/explore/projects and pick a project to contribute to. By doing so you will improve your general coding and communication skills. On top of that, read https://learnpythonthehardway.org/ and https://linuxjourney.com/.

Help others. If you can teach it, you have mastered it.
Once you discover something new and believe others would benefit from learning about your discovery, publish a write-up about it. Not only will you help others, you will learn to really master the topic because you can actually explain it properly.

Smile when you get feedback and use it to your advantage.
The bug bounty community is full of people wanting to help others so do not be surprised if someone gives you some constructive feedback about your work. Learn from your mistakes and in doing so use it to your advantage. I have a little physical notebook where I keep track of the little things that I learnt during the day and the feedback that people gave me.


Learn to approach a target.
The first step when approaching a target is always going to be reconnaissance — preliminary gathering of information about the target. If the target is a web application, start by browsing around like a normal user and get to know the website's purpose. Then you can start enumerating endpoints such as sub-domains, ports and web paths.

A woodsman was once asked, "What would you do if you had just five minutes to chop down a tree?" He answered, "I would spend the first two and a half minutes sharpening my axe."
As you progress, you will start to notice patterns and find yourself refining your hunting methodology. You will probably also start automating a lot of the repetitive tasks.

Related posts

1. Hacking Tools For Games
2. Hacking Tools
3. Pentest Tools List
4. Nsa Hacker Tools
5. Hacker Tools For Ios
6. Hacker Tools Free
7. How To Hack
8. Hacking Tools For Windows
9. Hacking Tools Download
10. How To Make Hacking Tools
11. Pentest Tools Bluekeep
12. Hacker Search Tools
13. Pentest Box Tools Download
14. Install Pentest Tools Ubuntu
15. Pentest Automation Tools
16. Hack Tools For Games
17. Hacking Tools For Beginners
18. Tools For Hacker
19. Hacking Tools Windows 10
20. Usb Pentest Tools
21. Usb Pentest Tools
22. Hacker Tools Windows
23. What Is Hacking Tools
24. Hack Tools Pc
25. Hacking Tools For Games
26. Hack Tools For Mac
27. World No 1 Hacker Software
28. Bluetooth Hacking Tools Kali
29. Hack Tools Pc
30. Hak5 Tools
31. Hacking Tools Usb
32. Hacker Tools Online
33. Github Hacking Tools
34. Hack Tools Online
35. Pentest Tools Download
36. Hacks And Tools
37. Pentest Tools Port Scanner
38. Hacker Tools Windows
39. Bluetooth Hacking Tools Kali
40. What Is Hacking Tools
41. Pentest Tools Subdomain
42. Hacker Tools For Mac
43. Hack Tools Github
44. Nsa Hack Tools
45. Hacker Security Tools
46. Hack Tools For Windows
47. Hacker Search Tools
48. Pentest Tools Apk
49. Hacking Tools Windows 10
50. Hacking Tools Github
51. Nsa Hack Tools Download
52. Hacker Tools Linux
53. Hack Tool Apk No Root
54. Usb Pentest Tools
55. Hack Tools Online
56. Hacking Tools Github
57. Tools 4 Hack
58. Hacking Tools For Beginners
59. Hacking Apps
60. Hacking App
61. Hacking Tools For Pc
62. Blackhat Hacker Tools
63. Hacking Tools 2019
64. Beginner Hacker Tools
65. Usb Pentest Tools
66. Hacker Tools List
67. Pentest Tools Website
68. Hacker Tools Free Download
69. Pentest Reporting Tools
70. Hack Tools Mac
71. Github Hacking Tools
72. Hacker Tools Windows
73. Hacking Tools Kit
74. Black Hat Hacker Tools
75. Pentest Tools Port Scanner
76. Hacker Tools
77. Usb Pentest Tools
78. Hak5 Tools
79. New Hacker Tools
80. Game Hacking
81. Hacker Tools Github
82. World No 1 Hacker Software
83. Nsa Hack Tools Download
84. Hacker Tools Mac
85. Pentest Tools Apk
86. Hack App
87. How To Hack