Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Bug Bounty Programs
- Defining bug bounty hunting.
- Different types of programs and platforms, including HackerOne, Bugcrowd, and Synack.
- Legal and ethical aspects, such as scope, disclosure policies, and NDAs.
Vulnerability Classes and the OWASP Top 10
- An overview of the OWASP Top 10 vulnerabilities.
- Case studies derived from actual bug bounty reports.
- Tools and checklists used for identifying security issues.
Essential Tools
- Basics of Burp Suite, covering interception, scanning, and the repeater.
- Utilizing browser developer tools.
- Reconnaissance utilities like Nmap, Sublist3r, and Dirb.
Testing for Common Vulnerabilities
- Cross-Site Scripting (XSS).
- SQL Injection (SQLi).
- Cross-Site Request Forgery (CSRF).
Methodologies for Bug Hunting
- Conducting reconnaissance and target enumeration.
- Comparing manual versus automated testing strategies.
- Effective tips and workflows for successful bug bounty hunting.
Reporting and Disclosure
- Crafting high-quality vulnerability reports.
- Including proof of concept (PoC) details and risk assessments.
- Communicating effectively with triagers and program managers.
Bug Bounty Platforms and Career Growth
- An overview of leading platforms such as HackerOne, Bugcrowd, Synack, and YesWeHack.
- Information on ethical hacking certifications, including CEH and OSCP.
- Understanding program scopes, rules of engagement, and industry best practices.
Summary and Recommended Next Steps
Requirements
- Familiarity with fundamental web technologies, including HTML and HTTP.
- Proficiency in utilizing web browsers and standard developer tools.
- A keen interest in the fields of cybersecurity and ethical hacking.
Target Audience
- Individuals aspiring to become ethical hackers.
- Security enthusiasts and IT professionals.
- Developers and QA testers with an interest in web application security.
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.