# Bug Bounty for Beginners -  Reference Little Book

## Bug Bounty for Beginners -  Reference Little Book

- [Little Bug Bounty Book](https://bugbounty-for-starters.humbertojunior.com.br/little-bug-bounty-book.md): Version 1.0
- [What is Bug Bounty](https://bugbounty-for-starters.humbertojunior.com.br/what-is-bug-bounty.md): A brief definition of Bug Bounty
- [Bug Bounty Platforms](https://bugbounty-for-starters.humbertojunior.com.br/bug-bounty-platforms.md): Here is a list of the most used platforms for Bug Hunting
- [Phases of Bug Hunting](https://bugbounty-for-starters.humbertojunior.com.br/phases-of-bug-hunting.md)
- [Required Knowledge](https://bugbounty-for-starters.humbertojunior.com.br/required-knowledge.md)
- [So, where do I start?](https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start.md)
- [Network Security](https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start/network-security.md)
- [Application Security](https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start/application-security.md)
- [Mobile Security](https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start/mobile-security.md): Where to start learning about Mobile Security?
- [Code Review and SAST](https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start/code-review-and-sast.md): Where to find resources about Code Review and SAST?
- [OWASP?](https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start/owasp.md)
- [Reconnaissance Phase](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase.md): How to start the recon phase
- [Footprinting](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/footprinting.md)
- [OSINT](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/footprinting/osint.md)
- [Google Dorks](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/footprinting/google-dorks.md)
- [Censys](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/footprinting/censys.md)
- [Shodan](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/footprinting/shodan.md)
- [Subdomain Enumeration](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration.md)
- [Amass](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/amass.md)
- [Subfinder](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/subfinder.md)
- [Assetfinder](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/assetfinder.md)
- [Aquatone](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/aquatone.md)
- [DNSrecon](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/dnsrecon.md)
- [DNSEnum](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/dnsenum.md)
- [HTTPX](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/httpx.md): Testing for online subdomains
- [ReconFTW](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/subdomain-enumeration/reconftw.md): All-in-One Tool
- [Fingerprint](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/fingerprint.md)
- [Nmap](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/fingerprint/nmap.md)
- [Rustscan](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/fingerprint/rustscan.md): For large ammount of hosts
- [Masscan](https://bugbounty-for-starters.humbertojunior.com.br/reconnaissance-phase/fingerprint/masscan.md): Mass IP port scanner
- [Scanning Phase](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase.md)
- [OpenVAS](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase/openvas.md)
- [Nuclei](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase/nuclei.md)
- [OWASP Zap](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase/owasp-zap.md)
- [NMAP](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase/nmap.md)
- [Looking for Parameters with Katana](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase/looking-for-parameters-with-katana.md)
- [Searching for XSS](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase/searching-for-xss.md)
- [SQL Injection (SQLi)](https://bugbounty-for-starters.humbertojunior.com.br/scanning-phase/sql-injection-sqli.md)
- [Testing Phase](https://bugbounty-for-starters.humbertojunior.com.br/testing-phase.md)
- [Manual Validation](https://bugbounty-for-starters.humbertojunior.com.br/testing-phase/manual-validation.md)
- [Severity Assessment in Vulnerability Testing](https://bugbounty-for-starters.humbertojunior.com.br/testing-phase/severity-assessment-in-vulnerability-testing.md)
- [Exploitation Phase](https://bugbounty-for-starters.humbertojunior.com.br/testing-phase/exploitation-phase.md)
- [Documentation of Findings](https://bugbounty-for-starters.humbertojunior.com.br/testing-phase/documentation-of-findings.md)
- [Reporting Phase](https://bugbounty-for-starters.humbertojunior.com.br/reporting-phase.md)