Bitcoin Forum

I don't come from a coding background, maths, or software engineering background; in fact, the "first" website I ever built was on yahoo GeoCities, back in the day.

But I'm fascinated by bug bounty hunting and helping people, whether there are rewards attached to it or not.

Are there any helpful tutorials you would recommend for someone like me?

Thanks for the suggestions.

There are many who doesn't have any technical background here on the forum but still there is lot if ways you can gain knowledge about them.You have little knowledge about creating websites on Yahoo back in those days.But the thing is what you intend to do like making some applications, websites or anything else bitcoin or crypto related as a whole?

This is bitcoin discussion forum and you only need to take active parts in discussion or learn through various guides available here to enhance your knowledge so don't worry about it at all.

They might sound attractive to you but they are not profitable at all and waste of time according to me and bounty hunters on the forum usually remain on one side of forum restricting their growth on the forum.

The thing is you will have to share promotional tweets or post on social media platforms having good followers and you will receive stakes according to it but when the time the tokens are listed on any of the exchange they get dumped soon by the whales or the founders so you are either forced to sell at very low prices or they will be lying dead in your wallets so what profit you get out of it?

Instead of it the best alternative I give you is to learn more about bitcoin and crypto stuff on the forum with extensive and useful guides from senior rank members ,ask your doubts and can answers to it whether technical or non technical and slowly you will get results and see your knowledge increasing but you should be dedicated towards it.

But you should also read the forum rules before making any post : Unofficial list of (official) Bitcointalk.org rules, guidelines, FAQ (https://bitcointalk.org/index.php?topic=703657.0)

Rest you will learn lot with time but if you are still interested in bounty hunting then visit  Bounty  (https://bitcointalk.org/index.php?board=238.0)

"But what do you intend to do like making some applications, websites or anything else bitcoin or crypto related as a whole?"

This will probably sound like a noob response, but I would like to help crypto project owners find bugs and report them.

I'm a big believer in the crypto + blockchain tech, but bounty rewards in crypto or rewards, in general, is not my sole drive to learn how to do bug bounty, I do want to challenge myself.

I appreciate your response, and hopefully, this will provide clarity my goals to learn something new, that I can add to my bag of tricks to help others. 

If looking for security vulnerabilities is your shtick, go around Twitter and look for reputable projects, read their source code (99% are open-source), and go look for vulnerabilities. A lot of them pay handsomely especially if you actually found a critical vulnerability.

"If looking for security vulnerabilities is your shtick, go around Twitter and look for reputable projects, read their source code (99% are open-source), and go look for vulnerabilities. A lot of them pay handsomely especially if you actually found a critical vulnerability."

Yes, this is more along the lines of what I'm looking to do; I understand it's very competitive - I guess my follow-up question would be some good tutorials explaining spotting vulnerabilities, how to find them any other useful resources.
 

Err.. it doesn't really work that way. To learn how to look for vulnerabilities you need to learn how to read code(and learn how to code, obviously). It's not really a job where you read some guide and after a week you can start looking for vulnerabilities.

You need to have a background in coding to understand more of the logical situations and problems for which will make you find if there's a bug or none.

Bug or vulnerability hunting requires you that skill and it will take you time for you to extract those vulnerabilities that a project or website may have.

It is one of the skills that I like but it will really take a lot of time for me to at least have those basics requirements of understanding how to code, how to read codes and how to execute them.

"Err.. it doesn't really work that way. To learn how to look for vulnerabilities you need to learn how to read code(and learn how to code, obviously). It's not really a job where you read some guide and after a week you can start looking for vulnerabilities."

I understand that, I'm not looking for a quick fix or anything as mentioned, I don't have a background in coding, I don't mind investing the time, effort and money into learning but if there were some sort of resources that I can be pointed out to, that will be helpful.

I appreciate your time and suggestions. 

1. Look for a programming language to learn (Python, Solidity, Rust, etc)
2. Read about it
3. Create basic projects
4. Slowly but surely rack up the difficulty and complexity of the small projects

Programming is one of those things that you have so so much information on the web. You just need to learn how to use Google. Good luck.

This isn't the best answer, but I can give my personal resource when it comes to programming
- https://www.freecodecamp.org/learn

Note that this resource will just teach you the fundamentals of programming, and not a laser focused material for bug hunting specifically in crypto. You can also complement that website to other YouTube video or any other method that you see fit to fasten your learning curve.

Personally, if you happen to at least find a programming language you are comfortable with (e.g., C, C++, C#, Python, JavaScript), you can now start learning the technical workaround behind bitcoin using this - https://github.com/bitcoinbook/bitcoinbook. But really, it's just that understanding the logic behind data structures and algorithms could make you learn other programming language much faster.

But again, you are not required to master all the stuff in every field though, just find your niche and, invest some time and master it. There are further technical materials for crypto as well, but you must have a thorough knowledge of bitcoin or crypto in general.

- https://www.lopp.net/bitcoin-information/technical-resources.html
- https://www.lopp.net/bitcoin-information/developer-tools.html

Well this forum has it’s own set of security bounties (https://bitcointalk.org/sbounties.php), with explicit listings of what to look out for and what the bounty would be, though the focus is essentially set on security.

Although, in general, it is feasible that one may find a software weakness through mere usability, it is much more likely to be detected using something rather more technically demanding such as using some form of code injection.

Thanks, these suggestions are fab and something that I can easily digest and put into action. 

There's already many smart contracts audit company that usually do this job exclusively for a crypto project like Certik which is the most famous among them all that give an overall audit for the company smart contract for possible bug and vulnerability.

But there are some bug that still they didn't cover but usually it is due to hacker exploitation. I don't know if bug bounty is profitable anymore due to tough competition. Your best chance is to pursue bug bounty for gambling companies and other startup that doesn't have smart contract audits.

To be fair, looking for bugs in code is actually very in-demand. I've heard code auditing companies for crypto projects have a wait list of years. THAT's how in-demand it actually is. So if anyone is interested in that field, hot damn there's definitely money to be made there.

First when I read your title, it seems like a shitposter who only want to earn few bucks in this forum. But after read the content, you're not and want to become bug bounty hunter where it's a hardcore job which you need a high tech knowledge.

Become a bug hunter isn't easy and almost impossible for beginner without tech knowledge will understand since reading every code and know the function about that, isn't an easy. I think you need to start to learn basic program and read tech book, attending many seminars and the better thing is have private coach/tutoring.

Well, freelancers have a heaven for their freelance jobs in cryptocurrency.

https://beincrypto.com/jobs/
[ANN] HYVE - Decentralized Labor Exchange (https://bitcointalk.org/index.php?topic=5394304.0) and lot of works in crypto: https://app.hyve.works

Right you need lot of experience in coding and debugging with development environment to find out the bugs in certain codes as it's not easy if you are not from technical background and why would anyone be hiring you without any prior experience?

There are lot of developers who have found bugs in some applications or code of companies and get paid for it but you need to have that mindset and knowledge for the same.

Like if he is interested he can try out something similar:Bug bounty FortuneJack (https://bitcointalk.org/index.php?topic=5259299.0)

I think there are plenty of bug bounty on crypto space. I usually spotted them mostly on popular social sites like Twitter and Reddit. Most of those bug bounty have reward when you find or submitted an approved findings. Normally their rewards in the form of tokens of their platform.

Yes thats right and even newbie here in forum can work on that its not about rank here but knowledge about coding and expertise to look on those bugs.

I almost skipped Op thinking that your post is about forum signature bounty hunting but on opening the content I discovered you are interested in bug finding bounty. It is a good one because it requires a good skill to be able to do it.
I found a topic for you, you can go through,hopefully some of the programs will still be running Overview of Bug Bounty Programs for Bitcoins (https://bitcointalk.org/index.php?topic=483195.msg5317091#msg5317091).

Don't forget that there is a bug bounty in the forum, placed by theymos. You can check the menu bar for details.

Would recommend starting with Python especially for those starting in programming without any background since the syntax is like more readable. Just don't be stuck in "tutorial hell" and start doing #3 after you had learn the basics.
Once you became really comfortable with the core language from building projects, you can start using Python. The framework would depend on what you are trying to build.
It is going to be a fun learning experience, OP. Trust me. ;)

---

Just like what others mentioned, I thought this was all about bounty hunting with those shitcoins also lol.

I also don't have this kind of background, moreover, I am too old to learn more about these things. But, in the crypto world, everybody can try it. We don't need to force that we should be like this or like that. But, if we are exactly willing to learn something new, we can focus on a certain things that we actually love doing. If you are looking for activities for such as bug bounty hunting, at least, you can read this article. They explain what to do to be a bug bounty. But once more, it needs a certain process and progress of learning and doing. If you really want to learn, you can learn it seriously. But you must remember that sometimes, the reality doesn't match the expectation.
https://www.geeksforgeeks.org/how-to-get-started-with-bug-bounty/

To do this, I think you should spend some time learning about programming first. This vulnerability detection job is for programmers, it requires skills in coding. I also learned about the bug bounty model on gitcoin, but since I'm not a programmer and don't know anything about the code I can't do it. If you are really passionate then spend a lot of time on it, that work will bring you great rewards.

a beginner suddenly wants to learn the Bounty bug, it's not easy because it takes good programming skills and not only that, we also have to be required to be able to find which gaps are open. It's not easy to be able to do it even if they have basic programming. there are many other bounties that can be done if you don't have programming skills.

Do you mean altcoin bounty or something?
The altcoin bounty does not produce as imagined. Newbie won't be able to make thousands of dollars from bounty whose only job is spamming social media. I don't think he should because in the end the time and the income won't be worth it.

It was better for him to hunt for knowledge than to hunt for money since a beginner, it was a good option to consider. For example, he can learn how to manage and develop a website, if successful then becoming a user spreading affiliates from various sites will also benefit.

Not only altcoin bounties but many more. If you really want to get thousands of dollars Bounty altcoins will not be able to give it. Signatures can also be a great option, but they also need to be good at developing accounts and contributing to forums. Hunting for knowledge since beginners is a good thing, but it must also be adjusted to our basic abilities whether we can do it or not. Don't be too pushy, while in the learning period, you can do some airdrop, tesnet, etc. tasks.