Where to Start

• Guide Getting Started In Bug Bounty Hunting

• https://bugbountyforum.com/resources/

• https://application.security/free/owasp-top-10

• Best Tips To Avoid Failures in Bug Bounty

• https://shubs.io/so-you-want-to-get-into-bug-bounties/

• How to Stop Learning and Start Hacking!

• Burp for Beginners: A practical intro to help you find your first bug

• Finding Your First Bug: Finding Bugs Using APIs

• https://umr4n6.github.io/post/Comms

• OWASP

  • OWASP top 10

• CTFs

  • Hacker101
  • Damn Vulnerable Web Application
  • Juice Shop

• Courses

  • Network Pentesting
  • PentesterLab
  • Web Security Academy

• Videos

  • STOK
  • The Cyber Mentor

• Tools

  • Portswigger Knowledgebase
  • Recon notes

• Conferences

  • DEFCON
  • BSides (I picked Manchester)
  • BlackHat

• Podcasts

  • The Bug Bounty Podcast
  • Darknet Diaries
  • Security Now
  • Risky Business
  • Planet Money - The Price Of A Hack

• Books

  • Web Hacking 101 (free from HackerOne)
  • OWASP Testing Guide
  • Bug Bounty Cheat sheet Books

• Write Ups & Disclosure

  • @disclosedh1
  • HackerOne Hacktivity

• Aggregators/Newsletters

  • Pentester Land

Reporting a Vulnerability?

• Writing Successful Bug Submissions
• Writing a good and detailed vulnerability report
• What does a good report look like?