Bug Bounty Program

Resolve bugs …

A bug bounty program is a deal offered(payed in USD dollars based on the bug severity)by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, security exploits and vulnerabilities. These programs allow the developers to discover and resolve bugs before the general public is aware of them, preventing incidents of widespread abuse. Bug bounty programs have been implemented by a large number of organizations, including Mozilla, Facebook, Yahoo!, Google, Reddit, Square, Microsoft, and the Internet bug bounty.

Beginners Guide to get started

1. Learn Computer Networking : A moderate knowledge on computer networking is mandatory for getting started. Proficient in topics like IP addresses, MAC addresses, OSI stack (and TCP/IP stack), OSI layers etc.
2. Get your hands dirty on the Web tech Stacks: Web programming languages like Javascript,CSS3, Html5 beginner to intermediate level of understanding of this languages will help a lot. The important protocols HTTP, TLP, FTP etc.
3. Practice to make you perfect : The more you practice on the skills mentioned you will able to find a solid vulnerability (or get the ability to check whether the application is well secured or not even after it has been tested by some bug hunters) .
4. Resources to checkout : Vulnerable Web applications these are intentional vm’s(virtual machines) or web app packages. These are available as general variants that contain many types of vulnerabilities and as dedicated variants that focus on a single vulnerability.

5 . Some applications to have a look at: SqlLol,hacme,bricks (not recommended for beginners. BWapp,DVWA(Damn,Vulnerable Web application),Webgoat these there are best for beginners

6. Testing on the Live Environment: After going through the above mentioned steps you can definitely start hunting on real websites.

7. Follow the latest Bug hunters : To know their approach how they progressed from a beginner to a expert

• Jason Haddix
• PortSwigger
• Jobert Abma
• Roy Castillo
• Stephane Chazelas
• Frans Rozen

Stay tuned for more tech contents …