iTranslated by AI
Released 'Introduction to OSS Bug Hunting: Get Your First CVE in 30 Days' on Zenn Book
Zenn Book
Reader Community
Hatena Bookmark
Background Story
Overview of the Book
📕 [Overview]
This book is a systematic and practical introductory guide to bug hunting for those who have finished learning the basics of Web security and want to achieve their first real-world milestone: obtaining a CVE ID.
While there are many learning materials and practice environments available, mastering them alone is often not enough to overcome the barriers to discovering vulnerabilities in real-world products and obtaining recognized CVE IDs.
In this book, we focus on open-source software (OSS) on GitHub. I have condensed my personal experience and know-how into a 30-day roadmap, covering everything from selecting target OSS to "search techniques" for finding the causes of vulnerabilities within vast amounts of source code, "code review" to interpret implementations, and "reporting skills" to get those vulnerabilities officially recognized.
Through this book, take your first step from being a mere "learner" to becoming a "bug hunter." I hope that after 30 days, your first CVE ID with your name on it will be issued.
💪 [Recommended for]
- ☆ Those who want to obtain a CVE ID
- ☆ Highly motivated and enthusiastic individuals
- Those interested in Web security and bug hunting
- Those interested in vulnerability assessment and penetration testing
- Those who want to challenge themselves with bug bounties in the future
🚩 [Hashtag]
- #OSSBugHuntIntroduction
🧑💻 [Author Profile]
- Security Engineer & Bug Hunter (since 2020)
- Previously engaged in vulnerability assessment and penetration testing at security vendor companies.
- Served as an instructor for the "Bug Bounty Introductory Course" at the Japan Hacker Association's "Hack Fes." and IssueHunt's "P3NFEST."
- Served as an instructor for "Introduction to Web Application Bug Hunting from CVE" at Security Mini Camp in Miyagi 2024.
Discussion