How Do I Get Started With Bug Bounty ?

How do I get started with bug bounty hunting? How do I improve my skills?



These are some simple steps that every bug bounty hunter can use to get started and improve their skills:

Learn to make it; then break it!
A major chunk of the hacker's mindset consists of wanting to learn more. In order to really exploit issues and discover further potential vulnerabilities, hackers are encouraged to learn to build what they are targeting. By doing this, there is a greater likelihood that hacker will understand the component being targeted and where most issues appear. For example, when people ask me how to take over a sub-domain, I make sure they understand the Domain Name System (DNS) first and let them set up their own website to play around attempting to "claim" that domain.

Read books. Lots of books.
One way to get better is by reading fellow hunters' and hackers' write-ups. Follow /r/netsec and Twitter for fantastic write-ups ranging from a variety of security-related topics that will not only motivate you but help you improve. For a list of good books to read, please refer to "What books should I read?".

Join discussions and ask questions.
As you may be aware, the information security community is full of interesting discussions ranging from breaches to surveillance, and further. The bug bounty community consists of hunters, security analysts, and platform staff helping one and another get better at what they do. There are two very popular bug bounty forums: Bug Bounty Forum and Bug Bounty World.

Participate in open source projects; learn to code.
Go to https://github.com/explore or https://gitlab.com/explore/projects and pick a project to contribute to. By doing so you will improve your general coding and communication skills. On top of that, read https://learnpythonthehardway.org/ and https://linuxjourney.com/.

Help others. If you can teach it, you have mastered it.
Once you discover something new and believe others would benefit from learning about your discovery, publish a write-up about it. Not only will you help others, you will learn to really master the topic because you can actually explain it properly.

Smile when you get feedback and use it to your advantage.
The bug bounty community is full of people wanting to help others so do not be surprised if someone gives you some constructive feedback about your work. Learn from your mistakes and in doing so use it to your advantage. I have a little physical notebook where I keep track of the little things that I learnt during the day and the feedback that people gave me.


Learn to approach a target.
The first step when approaching a target is always going to be reconnaissance — preliminary gathering of information about the target. If the target is a web application, start by browsing around like a normal user and get to know the website's purpose. Then you can start enumerating endpoints such as sub-domains, ports and web paths.

A woodsman was once asked, "What would you do if you had just five minutes to chop down a tree?" He answered, "I would spend the first two and a half minutes sharpening my axe."
As you progress, you will start to notice patterns and find yourself refining your hunting methodology. You will probably also start automating a lot of the repetitive tasks.

Related posts

1. Hacker Tools
2. Pentest Tools Apk
3. Hack Tool Apk No Root
4. Physical Pentest Tools
5. How To Make Hacking Tools
6. Kik Hack Tools
7. Pentest Tools Github
8. Hacking Tools And Software
9. What Is Hacking Tools
10. Hacking Tools For Games
11. Hacking Tools Download
12. Hacking Tools 2020
13. Termux Hacking Tools 2019
14. Hack Tools For Windows
15. Hack And Tools
16. Hacking App
17. Pentest Automation Tools
18. Hacking Tools 2019
19. Pentest Tools Find Subdomains
20. Pentest Tools Kali Linux
21. Hack And Tools
22. Hack Rom Tools
23. Hacker Tools 2019
24. Pentest Tools For Android
25. Hacks And Tools
26. New Hacker Tools
27. Hacking Tools Software
28. Nsa Hack Tools
29. Hacker Tools Apk Download
30. Pentest Tools Port Scanner
31. Top Pentest Tools
32. Hacking Tools For Windows Free Download
33. Hack Tools Github
34. Computer Hacker
35. Hacking Tools For Windows 7
36. Hacking Tools Download
37. Hacker Tools For Windows
38. Pentest Tools Port Scanner
39. Bluetooth Hacking Tools Kali
40. Pentest Tools Url Fuzzer
41. Pentest Tools Tcp Port Scanner
42. Hacking Tools Online
43. Hack App
44. Hacker Tools Hardware
45. Pentest Box Tools Download
46. What Are Hacking Tools
47. Hacks And Tools
48. Hack Tools Pc
49. Hacking Tools Hardware
50. Hacking Tools Online
51. Hack Tools
52. Github Hacking Tools
53. How To Make Hacking Tools
54. Hacking Tools Pc
55. Best Hacking Tools 2019
56. Top Pentest Tools
57. Top Pentest Tools
58. New Hacker Tools
59. Hack Tools
60. Nsa Hack Tools Download
61. Pentest Tools Kali Linux
62. Hack Tool Apk
63. Hacking Tools 2020
64. Hacker Tools Software
65. Best Hacking Tools 2019
66. Pentest Tools Url Fuzzer
67. Hacker Tools 2020
68. Underground Hacker Sites
69. Hack Tools Mac
70. Pentest Tools For Android
71. Wifi Hacker Tools For Windows
72. Black Hat Hacker Tools
73. Pentest Tools Url Fuzzer
74. Pentest Tools Review
75. New Hack Tools
76. Termux Hacking Tools 2019
77. Pentest Tools Framework
78. Hacking Tools For Kali Linux
79. Pentest Tools For Windows
80. Hacking Tools Github
81. Hacking Tools For Beginners
82. Tools Used For Hacking
83. Hacking Tools Free Download
84. Pentest Tools Port Scanner
85. What Is Hacking Tools
86. Hack Apps
87. Hacker Hardware Tools
88. Pentest Tools Url Fuzzer
89. Hacking Tools Windows
90. Hacker Tools Apk Download
91. Pentest Tools Framework
92. Hack And Tools
93. Computer Hacker
94. Hacking Tools 2019
95. Termux Hacking Tools 2019
96. Hacker Tools Free
97. Hacker Hardware Tools
98. Hacker Hardware Tools
99. Free Pentest Tools For Windows
100. Hacking Tools
101. Pentest Tools Android
102. Hacking Apps
103. Hacker Hardware Tools
104. Pentest Tools Android
105. Nsa Hack Tools
106. Hacker Tools For Mac
107. Pentest Tools For Mac
108. Hack Tools For Windows
109. Hack Tools For Ubuntu
110. Hacker Tools Linux
111. Pentest Tools Nmap
112. Pentest Tools Alternative
113. Hackrf Tools
114. Pentest Tools
115. Pentest Tools Nmap
116. Computer Hacker
117. Pentest Tools Kali Linux
118. Easy Hack Tools
119. Hack Tools Download
120. Hacker Tools Apk
121. New Hacker Tools
122. Hack Tools
123. Pentest Tools Url Fuzzer
124. Pentest Tools Review
125. Hacker Tools For Ios
126. Hacker Security Tools
127. Usb Pentest Tools
128. Pentest Tools Windows
129. Hacker Tools 2020
130. Blackhat Hacker Tools
131. Hack Tools
132. Pentest Tools For Windows
133. Hacker Tools Free
134. Hacker Search Tools
135. Pentest Tools Find Subdomains
136. Hack Tool Apk
137. Hacking Tools
138. Black Hat Hacker Tools
139. Hacker Tools
140. Hack Website Online Tool
141. Pentest Tools Find Subdomains
142. How To Make Hacking Tools
143. Pentest Tools Nmap
144. Hack Tools Pc
145. Hacking Tools And Software
146. Hack Tools For Games
147. Hacker Tools Hardware
148. Hacking Tools Windows 10
149. Pentest Tools For Mac