Topic · 3 articles

session

Beginner level

CSRF (Cross-Site Request Forgery) — fully explained with bypasses

CSRF: how it's exploited, common defenses (tokens, SameSite, Origin), bypasses (method change, JSON, double-submit, content-type) and where to hunt it in any app.

12 mincsrfauthsession

Read article

Free

Cookie flags — Secure, HttpOnly, SameSite and why they matter

HttpOnly blocks XSS-to-cookie, Secure forces HTTPS, SameSite kills CSRF. How they break and what to report when they're missing on sensitive cookies.

8 mincookiessessioncsrf

Read article

Intermediate level

Free

JWT — vulnerabilities, bypasses and claim manipulation

alg=none, RS256→HS256 confusion, kid SQLi/path traversal, jku spoofing, secret cracking with hashcat. How to hunt poorly verified JWTs.

13 minjwtauthsession

Read article

Practice session with real labs

Apply the techniques in safe environments based on real bug bounty reports.

See session labs

All topics Academy

hunters training: 711
labs from real reports: 55
completions: 1,205
in bounties practiced: $213,970

46 flags captured this week·Real reports from HackerOne · Bugcrowd · Intigriti·No commitment·Free Academy

BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real reports that paid out thousands of euros. The Academy is free forever.

Create free account See the labs

No card · free Academy · cancel anytime