PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Useful Online Resources for New Hackers

hackerone.com | blog | #bug-bounty | #training | #education | #hackerone | #resources
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A starter kit of free resources for new hackers: Hacker101, PortSwigger Web Security Academy, NahamSec's recon guide, Google's Bug Hunter University and the Hacktivity report archive.
Published
Collected

Related coverage

blog · netlas.io
Bug Bounty 101: The Best Courses to Get Started in 2025
A roundup of the best bug bounty courses for 2025, organized for different skill levels, learning styles and budgets, plus an overview of how bounty programs and platforms work.
blog · wiz.io
Introducing the Wiz Certified Program: Validate Your Expertise and Showcase Your Mastery!
Wiz launches its certification program, starting with the Wiz Certified Cloud Fundamentals exam—designed to validate hands-on Wiz skills and give cloud security professionals a recognized credential.
blog · netspi.com
The Evolution of Cyber Security Education and How to Break into the Industry
Tufts professor Ming Chow discusses how security education evolved from scarce textbooks to information overload, and why newcomers struggle to find trustworthy guidance on breaking into the industry.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
Back