EXPLORE THE CURRICULUM

Your learning map

See how it fits together. Find the lesson you want to learn next.

14 lessons · Security research

Reset filters

L4Vulnerability research & contributionStep 314–32310 lessons

314 Starting Bug Bounty — Understanding the System and Picking Your First TargetExplain the structure of the bug bounty system (platforms, programs, triage) Level 4Security research2 hours
315 Real-Service Recon — Attack Surface MappingExecute the 4 stages of the recon chain — collect → liveness check → classify → map — in order Level 4Security research3 hours
316 Vulnerability Discovery — A Systematic Feature-by-Feature ApproachExplain why "scanner dependence" is a beginner's trap Level 4Security research3 hours 30 minutes
317 Verifying Candidates and Confirming ImpactApply the "is it a bug or not" judgment criteria (reproducibility + security impact) Level 4Security research3 hours
318 Writing a Report That Gets AcceptedExplain the standard report structure (summary · reproduction steps · impact · fix suggestion · evidence) Level 4Security research3 hours
319 Submitting Your First Report & Handling Triage — The Real Work Starts After the ButtonExplain the triage flow a submitted report goes through (intake → review → verdict) Level 4Security research2 hours
320 1-day Vulnerability Analysis — Reverse-Engineering the Flaw from a Patch diffExplain what a 1-day vulnerability and patch-diff analysis are, and why they're powerful Level 4Security research3 hours
321 CVE Reproduction and Publishing the Analysis Report — The Proof of an Analysis Is ReproductionExplain the structure of reproduction proof: "success on the vulnerable version + blocked on the patched versi… Level 4Security research3 hours
322 Second CVE: Independent Analysis — Standing Alone Through the Analysis CyclePerform the full 1-day analysis cycle alone, guided only by a checklist Level 4Security research3 hours
323 Publishing an Open-Source Tool and Contributing to the Community — Code as a WorkChoose a tool to publish and clean its code into "a state others can use" Level 4Security research3 hours

L4New fields & integrated practiceStep 341–3444 lessons