Resources-for-Beginner-Bug-Bounty-Hunters

Labs & Testing Environments 🧪

• NahamSec's Free Bug Bounty Learning Lab

Web Hacking Fundamentals

Downloadables

• NahamSec.Training
• OWASP Juiceshop
• Google Gruyere
• DVWA
• Metasploitable 3
• Multidae
• Badstore

Free

• Hacker101 | Good Exercises for Beginners, can earn you private Invites on HackerOne
• Web Security Academy
• HackThisSite
• CTFChallenge | Web CTF based on real vulnerabilities
• Hacksplaining

Premium

• Pentesterlab | Good Labs with a broad variety of Topics, some very good Web Application Exercises
• BugBountyHunter | Learn how to test for security vulnerabilities on web applications

Misc

• 0l4bs - Cross-site scripting labs for web application security enthusiasts - by tegal1337
• Will it CORS? | Tell this magic CORS machine what you want, and it'll tell you exactly what to do
• XSS Labs from PwnFunction Great Labs in a beautiful layout

Vulnerable Apps

• https://application.security/ - SSRF

XSS

• alert 1 to win
• prompt(1)
• XSS Game By Google

General Hacking

Free

• VulnHuB
• W3chhalls
• [PicoCTF][https://picoctf.org/]
• Root-Me
• OverTheWire

Premium

• TryHackMe | Cool Hacking & Pentesting Labs with Web Challenges
• HackTheBox | provides Testing Labs, some Web Application Challenges
• Cyberseclabs

back to Intro Page