Bug bounty · 12 weeks · 3h/day
Ultimate Bug Hunter — midlevel restudy.
Gap-first, real 180 min/day. Prove the basics in minutes, fix setup gaps, leave with a working hunter rig. Every day is timed, every task pinned to an exact section, every checkbox mirrors the timeline.
Week 01 — Base Camp: HTTP, Burp, Scope, Notes
Prove the basics in minutes, fix setup gaps, leave with a working hunter rig.
Week 02 — Recon Mountain: Subdomains → JS → Secrets
Validated assets + ranked hosts + JS endpoints + triaged secrets.
Week 03 — Access Control: IDOR/BOLA, 403 Bypass, Mass Assignment
Two-account replays; highest bounty-per-effort.
Week 04 — Auth & Session: Reset, JWT, OAuth, MFA, SAML
ATO chains + first publication-quality report draft.
Week 05 — Client-Side: XSS, CSRF, CORS, Clickjacking
Method over spray; chains that pay.
Week 06 — DB Injection: SQLi, NoSQL, LDAP, ORM
UNION-to-blind pipeline, safe payloads on live targets.
Week 07 — Server Code: SSTI, XXE, Deserialization, RCE
Fingerprint first, escape second, lab-only RCE proof.
Week 08 — Fetch & HTTP: SSRF, Redirect, Smuggling, Cache
Cloud-impact chains; probe gently, never DoS.
Week 09 — Files & Secrets: LFI, Upload, Exposure
Upload→RCE + fast exposures, redacted proofs only.
Week 10 — API & Logic: REST, GraphQL, WS, Race
Per-object authz + workflow abuse + concurrency.
Week 11 — Cloud & Takeover: Buckets, IAM, Supply
Benign proofs, in-scope only, no destructive claims.
Week 12 — Modern + Hunt: LLM, Mobile, Chain, Report
Capstone: AI/mobile/pollution + live paid hunt + 30-60-90.