How Do I Get Started With Bug Bounty ?

How do I get started with bug bounty hunting? How do I improve my skills?



These are some simple steps that every bug bounty hunter can use to get started and improve their skills:

Learn to make it; then break it!
A major chunk of the hacker's mindset consists of wanting to learn more. In order to really exploit issues and discover further potential vulnerabilities, hackers are encouraged to learn to build what they are targeting. By doing this, there is a greater likelihood that hacker will understand the component being targeted and where most issues appear. For example, when people ask me how to take over a sub-domain, I make sure they understand the Domain Name System (DNS) first and let them set up their own website to play around attempting to "claim" that domain.

Read books. Lots of books.
One way to get better is by reading fellow hunters' and hackers' write-ups. Follow /r/netsec and Twitter for fantastic write-ups ranging from a variety of security-related topics that will not only motivate you but help you improve. For a list of good books to read, please refer to "What books should I read?".

Join discussions and ask questions.
As you may be aware, the information security community is full of interesting discussions ranging from breaches to surveillance, and further. The bug bounty community consists of hunters, security analysts, and platform staff helping one and another get better at what they do. There are two very popular bug bounty forums: Bug Bounty Forum and Bug Bounty World.

Participate in open source projects; learn to code.
Go to https://github.com/explore or https://gitlab.com/explore/projects and pick a project to contribute to. By doing so you will improve your general coding and communication skills. On top of that, read https://learnpythonthehardway.org/ and https://linuxjourney.com/.

Help others. If you can teach it, you have mastered it.
Once you discover something new and believe others would benefit from learning about your discovery, publish a write-up about it. Not only will you help others, you will learn to really master the topic because you can actually explain it properly.

Smile when you get feedback and use it to your advantage.
The bug bounty community is full of people wanting to help others so do not be surprised if someone gives you some constructive feedback about your work. Learn from your mistakes and in doing so use it to your advantage. I have a little physical notebook where I keep track of the little things that I learnt during the day and the feedback that people gave me.


Learn to approach a target.
The first step when approaching a target is always going to be reconnaissance — preliminary gathering of information about the target. If the target is a web application, start by browsing around like a normal user and get to know the website's purpose. Then you can start enumerating endpoints such as sub-domains, ports and web paths.

A woodsman was once asked, "What would you do if you had just five minutes to chop down a tree?" He answered, "I would spend the first two and a half minutes sharpening my axe."
As you progress, you will start to notice patterns and find yourself refining your hunting methodology. You will probably also start automating a lot of the repetitive tasks.

Related articles

1. Hacking Tools And Software
2. Pentest Tools Framework
3. Hacking Tools
4. Computer Hacker
5. Hacking Tools Hardware
6. Hack Tools For Mac
7. Pentest Recon Tools
8. Pentest Tools Github
9. Hacker Tools For Mac
10. Hacker Tools List
11. Best Hacking Tools 2020
12. Hack Tools For Ubuntu
13. Pentest Tools Kali Linux
14. Pentest Automation Tools
15. Hacks And Tools
16. Hack Apps
17. Hacking Tools For Games
18. Hack Tools Mac
19. Pentest Tools Github
20. Hack Tools Pc
21. Hacking Tools Free Download
22. Hacker Tools For Mac
23. Pentest Tools Apk
24. Github Hacking Tools
25. Pentest Tools Website
26. Pentest Recon Tools
27. Computer Hacker
28. Hacker Tools List
29. Hacker Tools For Pc
30. Hacker Tools List
31. Pentest Tools Github
32. Pentest Tools Framework
33. Hacking Tools 2019
34. Nsa Hacker Tools
35. Free Pentest Tools For Windows
36. Hacker Security Tools
37. Underground Hacker Sites
38. Hacking Tools For Windows 7
39. Pentest Automation Tools
40. Nsa Hacker Tools
41. Pentest Tools For Windows
42. Hacking Tools Download
43. Pentest Tools Free
44. Hacker Tools Free Download
45. Hacker Hardware Tools
46. Hacking Tools For Windows 7
47. Hacking Tools Windows 10
48. Pentest Tools Review
49. Hacker Tools Free Download
50. Tools 4 Hack
51. Bluetooth Hacking Tools Kali
52. Hackers Toolbox
53. Hacking Tools Online
54. Tools Used For Hacking
55. New Hacker Tools
56. Hacker Tools For Windows
57. Hacking Tools Github
58. Pentest Tools Github
59. Pentest Tools Kali Linux
60. Hacking Tools Windows 10
61. Top Pentest Tools
62. Hack Tools Online
63. Hack Rom Tools
64. Hacker Tools For Windows
65. Hacker Tools Free
66. Hacking App
67. Hacking Tools Online
68. Pentest Tools For Ubuntu
69. Hackrf Tools
70. Computer Hacker
71. Hacking Tools For Games
72. Game Hacking
73. Pentest Tools Tcp Port Scanner
74. Pentest Tools Linux
75. Hacker Tools Apk Download
76. Hack Tools
77. World No 1 Hacker Software
78. Hack Apps
79. Hacking Tools Download
80. Hack Tools For Games
81. Hack Tools For Ubuntu
82. Hacker Tools Free
83. How To Install Pentest Tools In Ubuntu
84. World No 1 Hacker Software
85. Hacker Tools Github
86. Pentest Reporting Tools
87. New Hack Tools
88. Hacking Tools Download
89. Hacking Tools Windows 10
90. What Are Hacking Tools
91. Hacking Tools Free Download
92. Hacking Apps
93. Hack Tools For Pc
94. Hack Tools For Games
95. Hacking Tools Software
96. Hacking Apps
97. Pentest Tools For Mac
98. Pentest Box Tools Download
99. Hacker Tools Online
100. Best Pentesting Tools 2018
101. Hacker Tools For Pc
102. Pentest Tools Tcp Port Scanner
103. Hacker Tools For Pc
104. Github Hacking Tools
105. Computer Hacker
106. Hacking Tools For Pc
107. Hacker Tools 2020
108. Termux Hacking Tools 2019