Bug Bounty Hunter

The certification associated with this course is the HTB Certified Bug Bounty Hunter (HTB CBBH).

Hack Responsibly.

Always ensure you have explicit permission to access any computer system before using any of the techniques contained in these documents. You accept full responsibility for your actions by applying any knowledge gained here.

These will be the notes I felt were worth writing down as things I was not completely familiar with and/or were new to me at the time of working through this course.

Some sections may be empty due to nothing being worth noting IMO.

Table of Contents

CBBH - Modules
Module 1: Web Requests
Module 2: Introduction to Web Applications
Module 3: Using Web Proxies
Module 4: Information Gathering - Web Edition
Module 5: Attacking Web Applications with Ffuf
Module 6: JavaScript Deobfuscation
Module 7: Cross-Site Scripting (XSS)
Module 8: SQL Injection Fundamentals
Module 9: SQLMap Essentials
Module 10: Command Injections
Module 11: File Upload Attacks
Module 12: Server-Side Attacks
Module 13: Login Brute Forcing
Module 14: Broken Authentication
Module 15: Web Attacks
Module 16: File Inclusion
Module 17: Session Security
Module 18: Web Service & API Attacks
Module 19: Hacking Wordpress
Module 20: Bug Bounty Hunting Process