Parth sikarwar
It is a programme offered by large companies where you or your team can go and find bugs in their websites and applications for example:- In 2021, the Android Vulnerability Reward program (VRP) doubled its payouts from 2020, and the highest payout was $157,000 awarded to an exploit chain found in Android.
Let’s get started with these steps:-
1. Learn Computer Networking:-
A decent understanding of Computer Networks is essential for starting a bug bounty program. You don’t have to be an expert in computer networking to get started with bug bounty – but you should be familiar with the fundamentals of inter-networking, IP addresses, MAC addresses, OSI stack (and TCP/IP stack), etc.
2. Familiarize yourself with web technologies:-
In web technologies, two computers communicate using markup languages such as JavaScript, HTML, CSS, and other multimedia packages Having a good knowledge of these languages for a beginner to an intermediate level person is more than enough. In addition to it, one should also learn about HTTP, FTP, TLS, like protocols. They are easily available on different online and offline platforms.
3. Learning Web Application Security Measures and Hacking Techniques:
This will include learning about common security mechanisms, security practices, their bypasses, common vulnerabilities in web applications, ways to find these vulnerabilities, and ways to patch and prevent the applications from these vulnerability
4.Testing Real Targets:
After you are thorough with your basics and have a decent level of skill, you can start doing the actual hunting on real websites. A lot of websites run bug bounty programs for their web assets. Some big names are:
- Verizon
- Starbucks
- Shopify
- Spotify
- Apple
These companies reward generously but finding a security bug on any of their assets is highly difficult due to tough competition. You must remember that the top bug bounty hunters of the world are testing these websites along with you. However, that doesn’t mean you can’t find something at all to learn more you can watch this video
