Bounty Hunting for beginners?

[Petz415]

I don't come from a coding background, maths, or software engineering background; in fact, the "first" website I ever built was on yahoo GeoCities, back in the day.

But I'm fascinated by bug bounty hunting and helping people, whether there are rewards attached to it or not.

Are there any helpful tutorials you would recommend for someone like me?

Thanks for the suggestions.

[1715310920]

1715310920

[1715310920]

1715310920

[1715310920]

1715310920

[1715310920]

1715310920

[1715310920]

1715310920

[aysg76]

I don't come from a coding background, maths, or software engineering background; in fact, the "first" website I ever built was on yahoo GeoCities, back in the day.

There are many who doesn't have any technical background here on the forum but still there is lot if ways you can gain knowledge about them.You have little knowledge about creating websites on Yahoo back in those days.But the thing is what you intend to do like making some applications, websites or anything else bitcoin or crypto related as a whole?

This is bitcoin discussion forum and you only need to take active parts in discussion or learn through various guides available here to enhance your knowledge so don't worry about it at all.

But I'm fascinated by bug bounty hunting and helping people, whether there are rewards attached to it or not.

They might sound attractive to you but they are not profitable at all and waste of time according to me and bounty hunters on the forum usually remain on one side of forum restricting their growth on the forum.

The thing is you will have to share promotional tweets or post on social media platforms having good followers and you will receive stakes according to it but when the time the tokens are listed on any of the exchange they get dumped soon by the whales or the founders so you are either forced to sell at very low prices or they will be lying dead in your wallets so what profit you get out of it?

Instead of it the best alternative I give you is to learn more about bitcoin and crypto stuff on the forum with extensive and useful guides from senior rank members ,ask your doubts and can answers to it whether technical or non technical and slowly you will get results and see your knowledge increasing but you should be dedicated towards it.

But you should also read the forum rules before making any post : Unofficial list of (official) Bitcointalk.org rules, guidelines, FAQ

Rest you will learn lot with time but if you are still interested in bounty hunting then visit Bounty

[Petz415]

"But what do you intend to do like making some applications, websites or anything else bitcoin or crypto related as a whole?"

This will probably sound like a noob response, but I would like to help crypto project owners find bugs and report them.

I'm a big believer in the crypto + blockchain tech, but bounty rewards in crypto or rewards, in general, is not my sole drive to learn how to do bug bounty, I do want to challenge myself.

I appreciate your response, and hopefully, this will provide clarity my goals to learn something new, that I can add to my bag of tricks to help others. 

[mk4]

This will probably sound like a noob response, but I would like to help crypto project owners find bugs and report them.

If looking for security vulnerabilities is your shtick, go around Twitter and look for reputable projects, read their source code (99% are open-source), and go look for vulnerabilities. A lot of them pay handsomely especially if you actually found a critical vulnerability.

[Petz415]

"If looking for security vulnerabilities is your shtick, go around Twitter and look for reputable projects, read their source code (99% are open-source), and go look for vulnerabilities. A lot of them pay handsomely especially if you actually found a critical vulnerability."

Yes, this is more along the lines of what I'm looking to do; I understand it's very competitive - I guess my follow-up question would be some good tutorials explaining spotting vulnerabilities, how to find them any other useful resources.
 

[mk4]

Yes, this is more along the lines of what I'm looking to do; I understand it's very competitive - I guess my follow-up question would be some good tutorials explaining spotting vulnerabilities, how to find them any other useful resources.

Err.. it doesn't really work that way. To learn how to look for vulnerabilities you need to learn how to read code(and learn how to code, obviously). It's not really a job where you read some guide and after a week you can start looking for vulnerabilities.

[boyptc]

Yes, this is more along the lines of what I'm looking to do; I understand it's very competitive - I guess my follow-up question would be some good tutorials explaining spotting vulnerabilities, how to find them any other useful resources.

You need to have a background in coding to understand more of the logical situations and problems for which will make you find if there's a bug or none.

Bug or vulnerability hunting requires you that skill and it will take you time for you to extract those vulnerabilities that a project or website may have.

It is one of the skills that I like but it will really take a lot of time for me to at least have those basics requirements of understanding how to code, how to read codes and how to execute them.

[Petz415]

"Err.. it doesn't really work that way. To learn how to look for vulnerabilities you need to learn how to read code(and learn how to code, obviously). It's not really a job where you read some guide and after a week you can start looking for vulnerabilities."

I understand that, I'm not looking for a quick fix or anything as mentioned, I don't have a background in coding, I don't mind investing the time, effort and money into learning but if there were some sort of resources that I can be pointed out to, that will be helpful.

I appreciate your time and suggestions. 

[mk4]

I understand that, I'm not looking for a quick fix or anything as mentioned, I don't have a background in coding, I don't mind investing the time, effort and money into learning but if there were some sort of resources that I can be pointed out to, that will be helpful.

I appreciate your time and suggestions. 

1. Look for a programming language to learn (Python, Solidity, Rust, etc)
2. Read about it
3. Create basic projects
4. Slowly but surely rack up the difficulty and complexity of the small projects

Programming is one of those things that you have so so much information on the web. You just need to learn how to use Google. Good luck.

[Maus0728]

I understand that, I'm not looking for a quick fix or anything as mentioned, I don't have a background in coding, I don't mind investing the time, effort and money into learning but if there were some sort of resources that I can be pointed out to, that will be helpful.

This isn't the best answer, but I can give my personal resource when it comes to programming
- https://www.freecodecamp.org/learn

Note that this resource will just teach you the fundamentals of programming, and not a laser focused material for bug hunting specifically in crypto. You can also complement that website to other YouTube video or any other method that you see fit to fasten your learning curve.

Personally, if you happen to at least find a programming language you are comfortable with (e.g., C, C++, C#, Python, JavaScript), you can now start learning the technical workaround behind bitcoin using this - https://github.com/bitcoinbook/bitcoinbook. But really, it's just that understanding the logic behind data structures and algorithms could make you learn other programming language much faster.

But again, you are not required to master all the stuff in every field though, just find your niche and, invest some time and master it. There are further technical materials for crypto as well, but you must have a thorough knowledge of bitcoin or crypto in general.

- https://www.lopp.net/bitcoin-information/technical-resources.html
- https://www.lopp.net/bitcoin-information/developer-tools.html

[DdmrDdmr]

Well this forum has it’s own set of security bounties, with explicit listings of what to look out for and what the bounty would be, though the focus is essentially set on security.

Although, in general, it is feasible that one may find a software weakness through mere usability, it is much more likely to be detected using something rather more technically demanding such as using some form of code injection.

[Petz415]

I understand that, I'm not looking for a quick fix or anything as mentioned, I don't have a background in coding, I don't mind investing the time, effort and money into learning but if there were some sort of resources that I can be pointed out to, that will be helpful.

I appreciate your time and suggestions. 

1. Look for a programming language to learn (Python, Solidity, Rust, etc)
2. Read about it
3. Create basic projects
4. Slowly but surely rack up the difficulty and complexity of the small projects

Programming is one of those things that you have so so much information on the web. You just need to learn how to use Google. Good luck.

Thanks, these suggestions are fab and something that I can easily digest and put into action. 

[Beparanf]

There's already many smart contracts audit company that usually do this job exclusively for a crypto project like Certik which is the most famous among them all that give an overall audit for the company smart contract for possible bug and vulnerability.

But there are some bug that still they didn't cover but usually it is due to hacker exploitation. I don't know if bug bounty is profitable anymore due to tough competition. Your best chance is to pursue bug bounty for gambling companies and other startup that doesn't have smart contract audits.

[mk4]

There's already many smart contracts audit company that usually do this job exclusively for a crypto project like Certik which is the most famous among them all that give an overall audit for the company smart contract for possible bug and vulnerability.

To be fair, looking for bugs in code is actually very in-demand. I've heard code auditing companies for crypto projects have a wait list of years. THAT's how in-demand it actually is. So if anyone is interested in that field, hot damn there's definitely money to be made there.

[Apocollapse]

First when I read your title, it seems like a shitposter who only want to earn few bucks in this forum. But after read the content, you're not and want to become bug bounty hunter where it's a hardcore job which you need a high tech knowledge.

Become a bug hunter isn't easy and almost impossible for beginner without tech knowledge will understand since reading every code and know the function about that, isn't an easy. I think you need to start to learn basic program and read tech book, attending many seminars and the better thing is have private coach/tutoring.

[hd49728]

Well, freelancers have a heaven for their freelance jobs in cryptocurrency.

https://beincrypto.com/jobs/
[ANN] HYVE - Decentralized Labor Exchange and lot of works in crypto: https://app.hyve.works

[aysg76]

Err.. it doesn't really work that way. To learn how to look for vulnerabilities you need to learn how to read code(and learn how to code, obviously). It's not really a job where you read some guide and after a week you can start looking for vulnerabilities.

Right you need lot of experience in coding and debugging with development environment to find out the bugs in certain codes as it's not easy if you are not from technical background and why would anyone be hiring you without any prior experience?

There are lot of developers who have found bugs in some applications or code of companies and get paid for it but you need to have that mindset and knowledge for the same.

Like if he is interested he can try out something similar:Bug bounty FortuneJack

[cryptoaddictchie]

I think there are plenty of bug bounty on crypto space. I usually spotted them mostly on popular social sites like Twitter and Reddit. Most of those bug bounty have reward when you find or submitted an approved findings. Normally their rewards in the form of tokens of their platform.

Become a bug hunter isn't easy and almost impossible for beginner without tech knowledge will understand since reading every code and know the function about that, isn't an easy. I think you need to start to learn basic program and read tech book, attending many seminars and the better thing is have private coach/tutoring.

Yes thats right and even newbie here in forum can work on that its not about rank here but knowledge about coding and expertise to look on those bugs.

[KingsDen]

I almost skipped Op thinking that your post is about forum signature bounty hunting but on opening the content I discovered you are interested in bug finding bounty. It is a good one because it requires a good skill to be able to do it.
I found a topic for you, you can go through,hopefully some of the programs will still be running Overview of Bug Bounty Programs for Bitcoins.

Don't forget that there is a bug bounty in the forum, placed by theymos. You can check the menu bar for details.

[isaac_clarke22]

~

Would recommend starting with Python especially for those starting in programming without any background since the syntax is like more readable. Just don't be stuck in "tutorial hell" and start doing #3 after you had learn the basics.
Once you became really comfortable with the core language from building projects, you can start using Python. The framework would depend on what you are trying to build.
It is going to be a fun learning experience, OP. Trust me.
Just like what others mentioned, I thought this was all about bounty hunting with those shitcoins also lol.