Starter Zone


Topic Replies Activity
Researcher Resources - Tutorials 12 December 4, 2019
Researcher Resources - How to become a Bug Bounty Hunter

Congratulations! It’s very exciting that you’ve decided to become a security researcher and pick up some new skills. We’ve collected several resources below that will help you get started. Read on for our walkthrough. S…

57 December 2, 2019
Researcher Resources - Tools 54 November 19, 2019
Researcher Resources - Getting Started

This is a list of resources that can be helpful to researchers that are just getting started, or those that want to improve some core aspects of their research and reporting. Please let us know if you have any suggestion…

16 June 3, 2019
Researcher Resources - Bounty Bug Write-ups

This is a collection of bug bounty reports that were submitted by security researchers in the infosec community. These write-ups are a great way to learn from fellow hackers. Web Hacking Uber Bug Bounty Turning Self-…

2 May 16, 2016
Common Assessment Tool Cheatsheets

Hey All! I have an unhealthy obsession for time savers when i'm doing pentest work. Since a lot of my time is spent on the command line I love cheatsheets. I thought i'd use this thread to post some of the more awesome…

13 April 25, 2018
Have a question? Ask it here in this thread! 157 December 12, 2019
How to start in bug bounty? 7 December 7, 2019
Hacker101 CTF Solutions/Resources 13 December 4, 2019
Pentest tools or scripts 9 December 4, 2019
Installing a GUI on VPS possible? And other things 7 December 2, 2019
Good CTFs or practice environments to practice in 3 November 25, 2019
Open redirect via header injectoin. Is this a vulnerbility? 4 November 16, 2019
Redirect url help? 4 April 11, 2019
Getting Started from Non Technical Background 5 November 1, 2019
RCE (remote code execution) 1 October 27, 2019
When automated scanning is not allowed in a program 1 October 25, 2019
I am ready to go, Is this all I need to do to start 7 October 23, 2019
Thread For First Time You Found an Approved Bug 1 October 19, 2019
Subdomain takeover 6 October 17, 2019
Start testing on website 5 October 11, 2019
10 character SSTI payload 2 October 10, 2019
Remote code execution 3 October 10, 2019
Domain name registration rules 4 October 10, 2019
Security misconfiguration, but is it enough for a report? 5 October 9, 2019
HTTP request smuggling attack 2 October 3, 2019
Sensitive token in URL 3 September 14, 2019
Questions about JavaScript and Linux 11 September 12, 2019
Total noob (non-techie)! Starting a career in bug hunting! 6 September 19, 2018
Advice on starting out with public programs 4 September 7, 2019