Bug Bounty Hunting: Responsible Web Testing

Learn how to work within program scope and report reproducible findings responsibly. Curriculum: 1) Program rules, scope and safe testing; 2) Asset discovery and technology fingerprinting; 3) Web request analysis; 4) Access-control and business-logic testing; 5) Common web vulnerability classes; 6) Evidence, impact and severity; 7) Writing a clear proof-of-concept in a permitted lab; 8) Report quality and remediation guidance.

Prerequisites: Web fundamentals and basic HTTP. Never test assets outside written program scope. Level: Intermediate.