---
description: >-
  The certification associated with this course is the HTB Certified Bug Bounty
  Hunter (HTB CBBH).
---

# Bug Bounty Hunter

{% hint style="success" %}
Hack Responsibly.

Always ensure you have explicit permission to access any computer system before using any of the techniques contained in these documents. You accept full responsibility for your actions by applying any knowledge gained here.
{% endhint %}

> These will be the notes I felt were worth writing down as things I was not completely familiar with and/or were new to me at the time of working through this course.
>
> Some sections _may_ be empty due to nothing being worth noting IMO.

## Table of Contents

| CBBH - Modules                                                                                                             |
| -------------------------------------------------------------------------------------------------------------------------- |
| [module-1-web-requests](bug-bounty-hunter/module-1-web-requests "mention")                                                 |
| [module-2-introduction-to-web-applications](bug-bounty-hunter/module-2-introduction-to-web-applications "mention")         |
| [module-3-using-web-proxies](bug-bounty-hunter/module-3-using-web-proxies "mention")                                       |
| [module-4-information-gathering-web-edition](bug-bounty-hunter/module-4-information-gathering-web-edition "mention")       |
| [module-5-attacking-web-applications-with-ffuf](bug-bounty-hunter/module-5-attacking-web-applications-with-ffuf "mention") |
| [module-6-javascript-deobfuscation](bug-bounty-hunter/module-6-javascript-deobfuscation "mention")                         |
| [module-7-cross-site-scripting-xss](bug-bounty-hunter/module-7-cross-site-scripting-xss "mention")                         |
| [module-8-sql-injection-fundamentals](bug-bounty-hunter/module-8-sql-injection-fundamentals "mention")                     |
| [module-9-sqlmap-essentials](bug-bounty-hunter/module-9-sqlmap-essentials "mention")                                       |
| [module-10-command-injections](bug-bounty-hunter/module-10-command-injections "mention")                                   |
| [module-11-file-upload-attacks](bug-bounty-hunter/module-11-file-upload-attacks "mention")                                 |
| [module-12-server-side-attacks](bug-bounty-hunter/module-12-server-side-attacks "mention")                                 |
| [module-13-login-brute-forcing](bug-bounty-hunter/module-13-login-brute-forcing "mention")                                 |
| [module-14-broken-authentication](bug-bounty-hunter/module-14-broken-authentication "mention")                             |
| [module-15-web-attacks](bug-bounty-hunter/module-15-web-attacks "mention")                                                 |
| [module-16-file-inclusion](bug-bounty-hunter/module-16-file-inclusion "mention")                                           |
| [module-17-session-security](bug-bounty-hunter/module-17-session-security "mention")                                       |
| [module-18-web-service-and-api-attacks](bug-bounty-hunter/module-18-web-service-and-api-attacks "mention")                 |
| [module-19-hacking-wordpress](bug-bounty-hunter/module-19-hacking-wordpress "mention")                                     |
| [module-20-bug-bounty-hunting-process](bug-bounty-hunter/module-20-bug-bounty-hunting-process "mention")                   |
