Bug
Bounty
Hunter
Access your account
Getting started
Learn about vulnerability types
Getting started in bug bounties
Test your knowledge
Free Web Application Challenges
Guides for your hunts
ZSeano's Methodology
Effective Note Taking for bug bounties
Making use of JavaScript (.js) files
Testing APIs
Testing file uploads
Bug Bounty ToolKit
Finding bugs using WayBackMachine
Useful Resources
Disclosed HackerOne Reports
Public HackerOne Programs
Our community
Endorsed Members
Hackevents
Member Articles
My BARKER Experience
— Contributed by
bongo
Reaching 1000+ reps on H1 and how you can do it too!
— Contributed by
iBruteforce
My Hackevent Experience
— Contributed by
iBruteforce
BugBountyHunter Experience & Review
— Contributed by
eliee
BugBountyHunter.com Review
— Contributed by
gprime31
Challenge Available
Mass assignement and learning new things
— Contributed by
Jomar
Reaching 1000+ reps on H1 and how you can do it too!
— Contributed by
iBruteforce
Choose vulnerability type
×
Cross Site Scripting (XSS)
5 labs available
Cross Site Request Forgery (CSRF)
1 lab available
Open Redirects (+Oauth flows)
3 labs available
Broken Access Control
Free Labs coming soon! Available for members
Server Side Request Forgery (SSRF)
Free Labs coming soon! Available for members
SQL Injection (SQLi)
Free Labs coming soon! Available for members
Command Injection
Insecure Direct Object Reference (IDOR)
1 Lab Available
XML External Entity (XXE)
Free Labs coming soon! Available for members
Merck & Co., Inc., Rahway, NJ, USA Program Statistics
View program
0
total issues disclosed
$0
total paid publicly
This program has not disclosed any reports.
Getting started
Learn about vulnerability types 
Getting started in bug bounties 
Test your knowledge
Free Web Application Challenges
Guides for your hunts 
ZSeano's Methodology
Effective Note Taking for bug bounties
Useful Resources 
Disclosed HackerOne Reports 
Our community
Endorsed Members
Hackevents 
Member Articles