New or experienced, test your skills against custom made web application challenges based on real bug bounty findings! Learn about new techniques and bypasses whilst embracing the mindset of a hacker. With a variety of challenges designed to teach you a broad amount of web application bugs there is something for everyone.
Learn about various mistakes developers make when developing and how vulnerabilities arise from this.
The stage is yours, take it.
Browse our free web application challengesFor newcomers
Can you find any XSS on this "harmless" page?🔥 Level up
What's behind this admin panel?🔥 Level up
Can you steal the SSO token?🔥 Level up
Can you access our private tool, XSS Destroyer?
FastFoodHackings is a demo web application a glimpse into what you can expect when purchasing membership. With over 25 unique findings to discover but no knowledge on what to find, it's up to you to learn the hacker mindset and discover all of the vulnerabilities!
Learn how the web application works and explore the various features available and begin your hunt!
Please note there is no triage available for this demo. Our members only web application BARKER is a much larger web application with more bugs, more features, more frequent updates as well as triaging of your issues!
BugBountyHunter Membership
Take your learning to the next level and put your knowledge & skills around web vulnerabilities to the test and apply them on our fully working web application dubbed BARKER.
BARKER contains over 100 real-life vulnerabilities, real bugs from real life scenarios, all you have to do is understand the features & begin testing for vulnerabilities! True hacker style. Signup, login and begin interacting with the various features and start testing for vulnerabilities instantly.
Gain confidence as you go through the application & begin to understand how everything works, parameters used etc, rather than being told, "there's xss here, can you find the bypass?". Over time the more you play with BARKER, the more you'll begin to find. How many bugs are staring at you in the face?
Learn more about joining BugBountyHunter
Jump into our treasure trove of security related content and begin your journey into the world of bug bounties! Learn about the various types of security vulnerabilities, explore disclosed vulnerabilities & read guides to help you with bug bounties.
New to bug bounties and need a helping hand on how to get started? Or perhaps you're interested in learning about various tools used by top bug hunters? Look no further, we've got it covered for you.
Our guide on how to get easily get started in bug bounties and begin hunting for vulnerabilities from the comfort of your own home
Learn about the different types of XSS and how to begin hunting for them
A variety of tools to help you with your hunt
Gain insight into why top bounty hunters use WayBackMachine to help them discover web application vulnerabilities
An article contributed by one of our top hackers, Jomar detailing his methodology during our hackevent, FirstBlood
An article contributed by one of our top hackers, iBruteforce giving you tips and advice on taking effective notes when participating in bug bounties
Since .js files contain code which helps websites function, what exactly should you be looking for?
Disclosed HackerOne Reports