Learn

How the work actually gets done.

Write-ups from the researchers who found the bugs, guides on how they work, and advisories from the companies that fixed them. A write-up is tied to a real report, published under that program’s own disclosure policy.

Labs111Hands-on exercises. Find the bug, capture the flag.Courses6Guided paths from reading to lab.Concepts14What each class of bug is, before you hunt one.Videos20Short walkthroughs.AcademyJoin, track progress, earn your level.

Write-ups & guides

Authentication bypassSQL / command injectionOtherWeb applicationCloud & infrastructureAccess control & business logic
Platform postWeb application

How disclosure works here

A write-up on datacoconut is tied to a real report, and the program's own disclosure policy decides when it can be published. Here is exactly what that means.

piPisence2 min1 month ago