A Practical Introduction to OSS Bug Hunting
Aiming to get my first CVE ID in 30 days
This book is a systematic and practical introductory guide to bug hunting, designed for those who have finished learning the basics of web security and are ready to achieve the real-world milestone of obtaining their first CVE ID.
Minimum price
$9.99
$19.99
You pay
$19.99Author earns
$15.99PDF
EPUB
WEB
About
About the Book
This book is a systematic and practical introductory guide to bug hunting, designed for those who have finished learning the basics of web security and are ready to achieve the real-world milestone of obtaining their first CVE ID.
While there are many learning resources and practice environments available, mastering them is often not enough to break through the barrier of finding vulnerabilities in real products and successfully securing a recognized CVE.
Focusing on open-source software (OSS) on GitHub, this book condenses the author's personal expertise into a 30-day roadmap. It covers everything from selecting target OSS and "search techniques" for finding vulnerabilities within vast amounts of source code, to "code review" for understanding implementations and the "reporting skills" required to have a vulnerability officially recognized.
Through this book, let's take your first step from being a mere "learner" to becoming a "bug hunter." I hope that in 30 days, your first CVE ID—with your name etched into history—will be issued.
Recommended People
- Those who want to try obtaining a CVE ID
- Those who are motivated and enthusiastic
- Those interested in web security or bug hunting
- Those interested in vulnerability assessment or penetration testing
- Those who want to challenge themselves with bug bounties in the future
Three Key Features of This Book
- "Living Knowledge" from an Active Bug Hunter
- Practical Wisdom on "Thought Processes" and "Strategy
- "Systematic" Coverage of the Entire Process
My hope is that this book serves as a catalyst for you to transition from being a mere "learner" to a "bug hunter" contributing to real-world security, resulting in the issuance of your very first CVE ID with your name engraved on it.
The suggested hashtag for this book is #OSSBugHunting
Author
About the Author
morioka12
Security Engineer & Bug Bounty Hunter (since 2020)
I work as a penetration tester at cybersecurity company in Japan.
Contents
Table of Contents
The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.
You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!
So, there's no reason not to click the Add to Cart button, is there?
See full terms...
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase
We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earned over $14 million writing, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Write and Publish on Leanpub
You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!
Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.
Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.