COMPLETE BEGINEER’S GUIDE IN 7 STEPS…
Hello, my dear friends, I’m back with the new and interesting topic which is getting started on bug hunting. But the main problem is how. We don’t know where we have to start.
In this blog, we’ll know where we can start ( from the basic level ) to intermediate as well as to advance level also. I’ll also provide you with free as well as paid resources from which you can learn something new in this field, and it will beneficial for all of you.
LEARN THE COMPUTER NETWORKING -
A decent knowledge of COMPUTER NETWORK is very essential for getting started with a bug bounty. You can learn many things in this like —
What is the Internet? How does it work?
About HTTP
TCP/IP
OSI, etc.
2. Get familiar with the web technologies —
This includes getting a basic understanding of two programming and web protocols. In this, you can learn—
Web Technologies
JAVA-SCRIPT
PHP
3. LEARN LINUX AND COMMAND LINE —
In Linux, you need to understand from the basic to the advanced learn CONSOLE COMMANDS, and how to navigate and do everything from your console.
4. OWASP TOP 10 —
The OWASP Top 10 provides ranking and remediation guidance for the top 10 most critical web applications security risks.
5. CHOOSE YOUR PATH —
Go with the pentesting if you are a beginner…
WEB PENETRATION TESTING
→
ANDRIOD APPLICATION PENTESTING
→
IOS APPLICATION PENTESTING
6. BOOKS TO START THE BUG BOUNTY —
To start in this bug bounty industry you also need to learn from the books. For that, you need to buy that books or you can also download the pdf of that books.
If you want these books and their pdf files free of cost then check out these two blogs → 1st one, and the 2nd one.
You will easily download the pdf files and learn new things.
7. WHERE TO PRACTICE —
You can practice on this websites-
BWAPP
WEBGOAT
DVWA ( RECOMMANDED)
PORTSWIGGER
CYCLONE TRANSFER
✨If you have any doubts then please let me know in the comment section ✨
