Silk road to Bug Hunting
Windows Fundamentals
· Learn how use computer
· How to use the Internet
· How to Searching for information in search engines professionally
· How to Use Chat GBT to obtain information on a specific topic
A+ Certification
https://mega.nz/folder/zSpnzKKD#UPhqD2NZBoM3ImhvMsx9qA
Network
· Network Concepts
· Network Protocols
· Network Topologies
· Network Devices
· IP Addressing and Subnetting
· Network Security
· Network Troubleshooting
· Wireless Networking
Network+ Cert
https://mega.nz/folder/fC5njSyR#NMw88ZzRaYhDTSmYewodXA
Linux
· Ways to use tools in a system
· Linux command line
https://learn.microsoft.com/en-us/training/paths/shell/
Programming Languages
C++ ) You need to learn this language because it helps you learn other languages (
· Syntax and Basic Structure
· Data Types
· Variables and Constants
· Operators
· Control Flow
· Functions
· Arrays and Vectors
· Pointers and References
· Object-Oriented Programming (OOP)
· File I/O
· Exception Handling
https://elzero.org/study/cplusplus-study-plan/
HTML + CSS ) You need them to understand how the website is designed(
https://elzero.org/study/html-2021-study-plan/
https://elzero.org/study/css-2021-study-plan/
JavaScript
· DOM Manipulation
· XSS ( R , S , Dom )
· Client-Side Validation
· AJAX and Web APIs
· Event Handling
· JavaScript Security Headers
· Browser Security Features
· JavaScript Obfuscation Techniques
· Client-Side Storage
https://mega.nz/folder/ya5W0Lxa#Ocx3Gbtkv8PqSzzSpG6PfA
https://mega.nz/folder/ub40ARZD#TmsUGA1MK4_-lVbRvJG-QQ
JSON
· JSON Injection
· Input Validation
· JSON Schema Validation
· Data Encoding and Escaping
· Client-Side JSON Handlin
· Server-Side JSON Processing
· JSON Web Tokens (JWT)
· Secure JSON APIs
· Security Testing Techniques
PHP & Laravel
· Authentication and Authorization
· Input Validation
· Route Protection
· Database Security
· Error Handling and Logging
· Session Management
· File Upload Security
· Security Headers and Middleware
· Third-Party Package Security
https://elzero.org/study/php-bootcamp-2022-study-plan/
MYSQL
· SQL Injection (SQLi)
· Input Validation and Prepared Statements
· Privilege Escalation
· Database Configuration
· Data Encryption and Hashing
· Security Vulnerability Assessment Tools
https://mega.nz/folder/wswGEIhb#tsqUggTZyfy5HyRWUkV9sg/folder/FgQRyaqb
Bash script ) You can learn it at any time with the other languages above(
· Command Line Basics
· Shell Scripting Basics
· File System Operations
· Text Processing
· System Administration Tasks
· System Configuration Analysis
· Log Analysis
· Network Monitoring and Analysis
https://mega.nz/folder/CGBj3S5S#UT2y_zzEcV8MybIEHvhpGQ
Also after that you can increase your experience in important languages
· Python
· Ruby
· Graphql
Web Application Security
· Security Vulnerabilities ) XSS , CSRF , IDOR , SQLI , authentication bypass, … ETC )
· Concurrency and Race Conditions
· Memory Leaks and Memory Corruption
· Buffer Overflows and Underflows
· Logic Errors
· Input Validation and Sanitization
· Resource Leaks
· Performance and Scalability Issues
· ETC …..
Start Hack
· Select your goal
· Learn How to Enumeration
· Learn how to recon ) Active & Passive Reconnaissance )
· Learn how to search for site files & folder
· Record your notes as you work
· Find out what dangerous information is being leaked and can report it
· Learn how to extract visible and hidden parameters
· Learn how to exploit the security vulnerability
· Try to escalate the vulnerability to the maximum extent possible
· Learn how to understand the severity status of any vulnerability
· Learn how to write a report correctly
Good Luck
