red · Medium · 250 XP · 30 minutes

Bug Bounty

Learn the core workflow of bug bounty hunting — from mapping your target and performing reconnaissance to discovering and exploiting vulnerabilities in web targets.

Tactical attack scenario

An enterprise company launches an open bug bounty scope. Map their public endpoints, locate high-severity loopholes, and bypass access control lists.

Learning objectives

Execute passive and active web reconnaissance workflows
Enumerate subdomains and locate hidden API paths
Identify common OWASP Top 10 web vulnerabilities
Draft professional disclosure reports to secure bounties

Recommended background

Basic terminal use and familiarity with the topic area are helpful.

Estimated duration: 30 minutes.

This public overview contains no flags, credentials, or solution steps. Practise only in the provided authorized environment.