Cyber Indians
Overview of Bug Bounty Platforms
How Bug Bounty Programs Work
Legal and Ethical Considerations
The legal implications of bug hunting
How to report vulnerabilities ethically
DNS Enumeration and Subdomain Discovery
Passive and Active Scanning Techniques
WHOIS Information Gathering
Google Dorking
Scanning Tools
HTTP Protocols and Methods
Headers, Cookies, and Session Management
Common Web Security Vulnerabilities
Command Injection and Path Traversal
ross-Site Request Forgery (CSRF)
Insecure Direct Object References (IDOR)
Server-Side Request Forgery (SSRF)
XML External EAuthentication and Authorization Testing
Remote File Inclusion (RFI) / Local File Inclusion (LFI)
Race Conditions
Broken Authentication and Session Management
OAuth, JWT, and OpenID Authentication Testing
Account Enumeration
Understanding REST APIs
EC2, S3, IAM, VPC basics
Testing GraphQL APIs
Authorization and Authentication in APIs
Common API Vulnerabilities
Testing for API Misconfigurations
Burp Suite
OWASP ZAP
Directory Scanning
Automating Tasks with Scripts and Tools
Recon-ng, Nmap, Nikto
Exploiting Vulnerabilities in the Wild
Privilege Escalation Techniques
Pivoting and Post-Exploitation
In the third month, focus on real-world applications of your skills, including writing effective vulnerability reports and performing post-exploitation.
At Cyber Indians, we believe the best way to learn is by doing.That’s why our approach is centered around real-world, hands-on projects. Instead of just listening to lectures or memorizing theory, our studforments dive into building projects and tools from the very first week.
Contact - Contact - Contact - Contact - Contact
