[ 01 ] — Hackers — Learn
Free security training, from zero to paid.
Video lessons, capture-the-flag labs and write-ups that teach the vulnerability classes programs actually pay for.
What vulnerabilities do bug bounties pay most for?
Programs typically pay most for issues with clear impact: remote code execution, authentication bypass, broken access control such as IDOR, SQL injection, SSRF reaching internal systems and account takeover chains.
[ 02 ] — Capabilities
Web fundamentals
HTTP, sessions, same-origin and auth.
OWASP Top 10
XSS, injection, SSRF, access control.
API hacking
REST, GraphQL and mobile backends.
CTF labs
Solve flags to earn private invitations.
Report writing
How to communicate impact.
AI hacking
Prompt injection and LLM abuse.
[ ∞ ] — Researchers
Ready to hack with us?
Registration is by prior approval only. Approved researchers receive their registration link by email.