# BUG - BOUNTY

## Platforms

### hackerone

### Bugcroud

### Integrity

### YesWehack

### Synack

* * *

## WorkFlow

<details data-node-type="hn-details-summary">
<summary>RECON</summary>
<p>Have to gather All information of target</p><h2>1) Finding Domains &amp; Subdomains</h2><h3>Tools</h3><p>1) Subfinder</p><p>2) Amass</p><h2>2) Identifying Technologies</h2><p>Identify what technolofy is running on target serer</p><h3>Tools</h3><p>1) wappalyzer</p><p>2) whatweb</p><p></p>
</details><details data-node-type="hn-details-summary">
<summary>SURFACE MAPING</summary>
<p>Now i have list of target, Now in need to understand how they work</p><h2>Crawling &amp; Direct Busting</h2><p>Browse all tools of website and discover its all web pages</p><h3>Tools</h3><p>1) ffuf</p><p>2) Gobuster</p><h2>Understanding Functionality</h2><p>manually exploe the application, How do API request look like when we add sometthing in cart</p><h3>Tools</h3><p>1) Burpsuite</p><p></p><p></p><p></p>
</details><details data-node-type="hn-details-summary">
<summary>Vulnerability Testing</summary>
<p>Look for specific weakness</p><p>1) can i broke the login logic? (Authentication Flows)</p><p>2) can i view or edit another user's data? (Access Control issues)</p><p>3) can i inject malicious code (injection flows , like XSS or SQLi)</p>
</details><details data-node-type="hn-details-summary">
<summary>Exploitation</summary>
<p>FInding a Potential Bug</p><p></p>
</details><details data-node-type="hn-details-summary">
<summary>Reporting</summary>
<p>i found the bug successfully exploited it , now ii need to generate the reports on community findings</p>
</details>

* * *

## Skills Required For BUG BOUNTY

1.  Web application Security (most imp)
    

understanding if OWASP TOP 10

2.  Networking Fundamentals
    

understanding of HTTP/HTPS protocol, how request and response work , DNS , IP addresses, and common Ports

3.  Scripting - bash or python
    

don't need of software, but basic scripting skills are incredibly helpful

4.  Reconnaissance Techniques
    

Knowing ow to find hidden information about your target is hald battle, this involves using search engine( Google Dorking), Github, Certificate Logs, Various OSINT

5.  Vulnerability Analysis
    

i need to be able to analyze the result, understanding why a vulnerabilty exists

* * *

## Commom Tools Used By BUG HINTERS

### 1) Burpsuite

### 2) OWASP ZAP

### 3) Nmap

### 4) Subfinder

### 5) Amass

### 6) ffuf

* * *

### CONCLUSION

### Start with fundamentals, practise responsibly, Focus on quality not just quantity, be patiemt and persistent