Book Image

Bug Bounty Hunting Essentials

By : Carlos A. Lozano, Shahmeer Amir
Book Image

Bug Bounty Hunting Essentials

By: Carlos A. Lozano, Shahmeer Amir

Overview of this book

Bug bounty programs are the deals offered by prominent companies where-in any white-hat hacker can find bugs in the applications and they will have a recognition for the same. The number of prominent organizations having this program has increased gradually leading to a lot of opportunity for Ethical Hackers. This book will initially start with introducing you to the concept of Bug Bounty hunting. Then we will dig deeper into concepts of vulnerabilities and analysis such as HTML injection, CRLF injection and so on. Towards the end of the book, we will get hands-on experience working with different tools used for bug hunting and various blogs and communities to be followed. This book will get you started with bug bounty hunting and its fundamentals.
Table of Contents (20 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

CTFs and wargames


An easy and very effective way to learn about computer security is through games called Capture The Flags (CTFs). These games are simulations of real environments, with vulnerabilities and challenges. The following is a list of some of the most famous games.

Hack The Box

Hack The Box (https://www.hackthebox.eu/) is a complete laboratory, and is totally free. It has different scenarios to practice in real environments, with detailed explanations about how to perform testing.

Damn Vulnerable Web Application

Damn Vulnerable Web Application (http://www.dvwa.co.uk/) is a project developed in PHP to learn about application security. It is easy to install and has different levels to teach each topic, including an OWASP testing guide.

Badstore

Badstore (https://www.vulnhub.com/entry/badstore-123,41/) is an application that simulates an online store, developed with JavaScript and MySQL. It has the most common store features and it is possible to apply basic security application concepts...