Absolute Beginners Guide For Finding P4 Bugs -Part 1

Hi there! It’s cyberbeat again with something amazing for you. I will be going through the topics which are easy to find and can gather you your initial bounties. Let the drumroll begin…

In the context of bug bounty programs, bugs are often classified by their severity or impact, typically using a scale from P1 to P4.

P4 bugs can get you around $50-$500 per bug. Later down the line, you can escalate the bugs using these minor bugs and can receive a big payout! Always remember to check the program guidelines; some of the explained could be out-of-scope. You will hurt your points if you submit out-of-scope bugs. So always read the targets in scope and out of scope.

Let’s get into it!

Before you look for bugs, try to explore all the functionalities of the application — what it does and what sort of logic and security measures it have. Let’s discuss some of the easiest bugs.

No Password Policy

Go to the in scope target, create an account and see if you have any password policy enabled. Here are some common password lists. Below are top 100 common passwords-