Overview
Bug bounty methodology, recon, vulnerability assessment, XSS, command injection, file inclusion and SQL injection — practised in lab apps and PortSwigger labs, finished with professional reports.
What it covers
- Bug bounty methodology and platforms
- Recon
- Vulnerability assessment
- Cross-site scripting (XSS)
- Command injection
- File inclusion
- SQL injection
- Professional report writing
Course questions
Do I pay when I register?
No. Registering reserves your interest. We contact you to confirm your seat, then arrange payment by InstaPay or bank transfer.
Is it online or in person?
It depends on the cohort. Format, schedule, location and price are set for each cohort and shown on this page when it is announced.
Is it legal to practise these techniques?
Only on systems you own or are explicitly authorized to test. Every practical exercise runs in the course lab.
Offensive techniques are taught for authorized, legal testing only. Every student accepts the authorized-use agreement when registering.