In this module, you’ll learn what bug bounty hunting is, where to do it (like HackerOne and Bugcrowd), and the types of programs (public or private). You’ll understand how hunters are ranked, how to start hunting bugs, what to read and practice, and how to follow the right steps. You’ll also learn the rules, how to choose the right targets, and how to keep learning and improving. This module gives you the basics to begin your bug bounty journey.

In this module, you’ll learn how to write a proper bug bounty report. First, you need to understand the program’s policy—like its mission, allowed targets, rewards, and rules. Then, you’ll learn how to write a clear and respectful report with all important parts: title, description, proof of concept, exploitability, impact, and suggested fix. You’ll also learn how to reply professionally to any questions from the security team. This helps you make strong, effective reports that get accepted.

In this module, you’ll learn about SQL Injection (SQLi), a common and powerful web vulnerability. You’ll understand its main types: In-band (classic), Inferential (blind), and Out-of-band SQLi. We’ll also explore what bug bounty hunters aim to achieve with SQLi attacks. Real-world case studies from Uber, Grab, Zomato, and LocalTapiola will help you learn how these bugs were found, reported, and what key lessons you can take from each. This will build your practical knowledge of finding and reporting SQLi vulnerabilities.

In this module, you’ll learn about CSRF (Cross-Site Request Forgery) and how it works. You’ll understand why it happens, the difference between GET and POST CSRF, and which protections are weak or strong. We’ll cover secure practices like using secret cookies, HTTPS, and request restrictions. You’ll also learn how attackers detect and exploit CSRF, especially when combined with XSS. Real-life examples from Shopify and Badoo will show how dangerous CSRF can be and how to protect against it.

Origins
What is the main problem?
Following the flow
Spidering
Points of interest
Analysis
User input
Out-band channels
Naming conventions
Keywords related to technologies
Analyzing the traffic
Application logic vulnerabilities in the wild
Bypassing the Shopify admin authentication
Starbucks race conditions
Binary.com vulnerability – stealing a user’s money
HackerOne signal manipulation
Shopify S buckets open
HackerOne S buckets open
Bypassing the GitLab 2F authentication
Yahoo PHP info disclosure
Summary

In this module, you’ll learn about different types of XSS attacks like Reflected, Stored, DOM-based, and others like Blind, Flash-based, and Self XSS. You’ll understand how to detect XSS in real-world scenarios by following the input flow, bypassing filters, and using special strings or encoding tricks. We’ll also walk through the typical workflow of an XSS attack. Real bug bounty case studies from HackerOne, Slack, Trello, Shopify, Twitter, Yahoo, and Google will help you learn how XSS bugs were found and reported, and what key lessons each case offers. This will boost your practical XSS hunting skills.