"How to Get Started with Bug Bounty" - Resource Lists & Advice
Merry Christmas everyone! ⛄⛄⛄⛄ (Or happy holidays!)
This is my gift for you the ultimate getting started guide for bug bounties / ethical hacking / cybersecurity. In this video, I go through a ton of resources including books, courses, videos, podcasts, conferences, and give out some study guides for people who wanna get into bug bounties but they have no hacking experience, no experience in tech, some security experience but not in bug bounties. I hope you find this super useful, it's PACKED full of information, almost an hour of stuff to check out!
Got questions? I have answers come follow me on twitter @insiderphd / insiderphd
Timestamps
0:00 - Intro and preamble
5:13 - The Ultimate Bug Bounty Learning Pipeline
12:09 - Resources
37:15 - Study Plans/Guides
49:09 - Continuing Education beginner and beyond!
Links
OWASP
-- OWASP top 10: https://www.owasp.org/index.php/Categ...
-- Bug Class Information: https://www.owasp.org/index.php/Cross...)
-- XSS filter bypasses: https://www.owasp.org/index.php/XSS_F...
CTFs
-- Hacker101: https://ctf.hacker101.com/
-- Damn Vulnerable Web Application: http://www.dvwa.co.uk/
-- Juice Shop: https://www.owasp.org/index.php/OWASP...
Courses
-- The Cyber Mentor - Network Pentesting: • Full Ethical Hacking Course - Beginner Net...
-- PentesterLab: https://pentesterlab.com/
-- Web Security Academy: https://portswigger.net/web-security
Videos
-- STOK: / @stokfredrik
-- The Cyber Mentor: / @tcmsecurityacademy
Tools
-- Portswigger Knowledgebase: https://support.portswigger.net/custo...
-- Recon notes: https://github.com/swisskyrepo/Payloa...
Conferences
-- DEFCON: / defconconference
-- BSides (I picked Manchester): / @bsidesmanchester5371
-- BlackHat: / blackhatofficialyt
Podcasts
-- The Bug Bounty Podcast: https://open.spotify.com/show/3yTTlfX...
-- Darknet Diaries: https://darknetdiaries.com/
-- Security Now: https://www.grc.com/securitynow.htm
-- Risky Business: https://risky.biz/
-- Planet Money: The Price Of A Hack: https://www.npr.org/sections/money/20...
Books
-- Web Hacking 101 (free from HackerOne): https://www.hackerone.com/blog/Hack-L...
-- OWASP Testing Guide: https://www.owasp.org/index.php/OWASP...
-- Bug Bounty Cheat sheet Books: https://github.com/EdOverflow/bugboun...
Certificates
-- Offensive Security Certified Professional: https://www.offensive-security.com/pw...
Write Ups & Disclosure
-- @disclosedh1: / disclosedh1
-- HackerOne Hacktivity: https://hackerone.com/hacktivity
Aggregators/Newsletters
-- Pentester Land: https://pentester.land/ Pentester Land