Resources-for-Beginner-Bug-Bounty-Hunters/assets/labs.md

Resources-for-Beginner-Bug-Bounty-Hunters

Labs & Testing Environments 🧪

Web Hacking Fundamentals

Free

• Hacker101 | Good Exercises for Beginners, can earn you private Invites on HackerOne
• HackEdu
• Web Security Academy
• HackThisSite
• CTFChallenge | Web CTF based on real vulnerabilities
• XSS-Game | Learning Platform for XSS
• Hacksplaining

Premium

• Pentesterlab | Good Labs with a broad variety of Topics, some very good Web Application Exercises
• BugBountyHunter | Learn how to test for security vulnerabilities on web applications

Misc

• 0l4bs - Cross-site scripting labs for web application security enthusiasts - by tegal1337
• Will it CORS? | Tell this magic CORS machine what you want, and it'll tell you exactly what to do
• XSS Labs from PwnFunction Great Labs in a beautiful layout

Vulnerable Apps

• Google Gruyere
• DVWA
• OWASP Juice Shop
• Metasploitable 3
• Multidae
• Badstore
• https://application.security/ - SSRF

XSS

• alert 1 to win
• prompt(1)
• XSS Game By Google

General Hacking

Free

• VulnHuB
• W3chhalls
• [PicoCTF][https://picoctf.org/]
• Root-Me
• OverTheWire

Premium

• TryHackMe | Cool Hacking & Pentesting Labs with Web Challenges
  • Videos: TryHackMe! Basic Penetration Testing // TryHackMe! EternalBlue/MS17-010 in Metasploit // TryHackMe! OhSINT - METADATA & Research
• HackTheBox | provides Testing Labs, some Web Application Challenges
• Cyberseclabs
• Kontra Application Security Training

---

back to Intro Page