Bug Bounty — HackerOne + Bugcrowd + CVE (trouver des failles légalement et se faire payer)

📖 About this course

📚 Course program (9 lessons)

• 1
  Introduction — Cadre légal du bug bounty et plateformes (HackerOne, Bugcrowd, Intigriti, scopes, safe harbor)

  ▶ Lesson ⏱ 30 min
  ▶ Free preview
• 2
  Reconnaissance web — Burp Suite, Subfinder, Amass, fingerprinting

  ▶ Lesson ⏱ 60 min
  🔒 Sign up to access
• 3
  OWASP Top 10 pratique — IDOR, SSRF, XXE, CSRF, SQLi avancée

  ▶ Lesson ⏱ 60 min
  🔒 Sign up to access
• 4
  Business logic flaws et API hacking (REST/GraphQL, BOLA, introspection)

  ▶ Lesson ⏱ 60 min
  🔒 Sign up to access
• 5
  XSS avancé et DOM — Reflected, Stored, DOM-based, CSP bypass, account takeover chains

  ▶ Lesson ⏱ 60 min
  🔒 Sign up to access
• 6
  Divulgation responsable — CVSS scoring, rapport de qualité, CVE numbering MITRE

  ▶ Lesson ⏱ 60 min
  🔒 Sign up to access
• 7
  Monétiser et progresser — Hall of Fame, programmes privés, portfolio, Top 100 HackerOne

  ▶ Lesson ⏱ 60 min
  🔒 Sign up to access
• 100
  Examen blanc Bug Bounty — 25 questions (60 min)

  ▶ Exam ⏱ 60 min
  🔒 Sign up to access
• 200
  Examen final Bug Bounty — 50 questions (120 min)

  ▶ Exam ⏱ 120 min
  🔒 Sign up to access

🎓 Available quizzes (2)

• 🎯
  Examen blanc Bug Bounty — 25 questions (60 min)

  📝 25 questions ⏱ 60 min 🎯 Threshold 70% ⭐ 50 XP
  🔒 Sign up to access
• 🎯
  Examen final Bug Bounty — 50 questions (120 min)

  📝 50 questions ⏱ 2 min 🎯 Threshold 70% ⭐ 100 XP
  🔒 Sign up to access

🎯 What you'll learn

• Master the fundamentals of this module with a structured path
• Practice with real-world exercises and case studies
• Track your progress through interactive quizzes
• Earn a completion certificate at the end of the course
• Benefit from the ITAG community support

📋 Prerequisites

• Curiosity and willingness to learn
• No specific technical prerequisites
• Internet connection (courses accessible from any device)