HackerOne Courses

Mental Health for Hackers Among COVID-19 - Introduction to CBT

6 ratings

A brief introduction to CBT connects anxiety with thought and behavioral techniques for responding to negative thoughts.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Hacker101

1 rating

Hacker101 is a collection of videos that will teach you everything you need to operate as a bug bounty hunter.

• Independent
• Self-Paced
• Free Online Course

Pentest Reporting and Best Practices

1 rating

Learn to structure a pentest report so technical details are clear to both security teams and executives.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Hacker101

A practical introduction to bug bounty hunting, covering web vulnerabilities, Burp Suite, reporting, threat modeling, and mobile application hacking.

• YouTube
• 4 hours 30 minutes
• Self-Paced
• Free Video

Breaking VNC Clients with Evil Servers

A security talk on using malicious servers to break VNC clients.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Fuzzing XSS Sanitizers for Fun and Profit - Tom Anthony

A security talk focused on fuzzing XSS sanitizers to find bugs.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

The Bug Hunter's Methodology - Application Analysis

A bug hunter’s methodology for analyzing applications.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Vulnerabilities I've Found - The Fun, the Weird and the Technical

A hacker shares the fun, unusual, and technical vulnerabilities he has found while creatively exploiting systems.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Submitting High Quality Bug Bounty Reports - Tips from Behind the Curtain

Learn how to submit higher quality bug bounty reports through advice from a security researcher and program manager.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

All Your -Data-base Are Belong To Us

A researcher traces a path from fuzzing office file parsers to discovering and exploiting zero-day code execution bugs.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Developing CTFS - Writing and Hosting Intentionally Vulnerable Applications

Learn to build CTF infrastructure and intentionally vulnerable applications while isolating flaws so players cannot compromise one another or the host platform.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

TruffleHog Chrome Extension - Open CORS in SAAS API's Lead to Leaky Keys

A Chrome extension surfaces API keys exposed on web pages, with examples of discovered keys and a walkthrough of the tool.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

InfoSec - A Broken Industry That Keeps it Insecure and Risky

A look at what drives burnout among security professionals and how teams can support healthier boundaries, self-care, and vulnerability disclosure practices.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Haptyc - A Library for Building Microfuzzers in Turbo Intruders

Haptyc’s reusable transform tags let hackers define request positions and mutations for modular, sophisticated fuzzing in Turbo Intruder.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hacking on Bug Bounties for Five Years

A five-year bug bounty retrospective traces how discoveries from SSRF to subdomain takeovers grew out of reconnaissance, testing, and reporting.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk