Bug › Module 2 › Lesson 4
Lab — Program Notes
Pack platform enrollment + program type + selection note — literacy file only, dest $SCOPE_HOST.
Visual · bounty_platform_lab
Lab: write platform pack. $SCOPE_HOST only. Original Cyberlium.
Opening
Platform pack before probes — enrollment proof on paper first.
Lessons 2-1 through 2-3 covered platforms, program types, and selection rationale. This lab ships the combined artifact: platform name, $SCOPE_HOST program URL, program type, enrollment date, and three selection reasons. No recon run required — paperwork first. Next: Quiz — Platforms and Programs.
1. Lab contract: write the platform pack
Create $HOME/cyberlium-lab/t20-m02-l04-platform-lab.txt with platform name, $SCOPE_HOST program URL, program type, enrollment date, and three selection reasons.
Optional: screenshot hash or policy date line — still no offensive run required.
Command guide
Try these commands — Lab contract: write the platform pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
HackerOne docs — https://docs.hackerone.com/ Bugcrowd resources — https://www.bugcrowd.com/resources/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
curl -sS -I --max-time 8 https://www.bugcrowd.com/ | head -10 printf 'platform: program_url: why: ' > "$HOME/cyberlium-lab/t20-program-notes.txt" curl -sS --max-time 8 https://httpbin.org/get | head -20
Primary tools to practice this lesson: curl. Reference sites: HackerOne docs (https://docs.hackerone.com/); Bugcrowd resources (https://www.bugcrowd.com/resources/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check enrollment discipline
Confirm you clicked Accept on THIS program — not a similar-named one. Redact any random URL examples from drafts to $SCOPE_HOST.
Classmates enroll in their own programs; do not share credentials or scope launder through each other's accounts.
3. Lock the proof
chmod 600 on the pack. Quiz next — then Scope Literacy.
Researchers archive enrollment evidence; you are building that habit early.
4. What you ship: platform pack for $SCOPE_HOST
Platform + URL + type + enrollment date + selection reasons. $SCOPE_HOST named. chmod 600.
5. What you record before the next lesson
Date. Platform pack path. $SCOPE_HOST enrollment proof. File t20-m02-l04-platform-lab.txt chmod 600.
6. Wrong vs right: random sites vs in-scope program
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
List ten unenrolled programs as 'future targets.' Skip file and browse HackerOne randomly.
Right
Write YOUR platform pack for $SCOPE_HOST. chmod 600. Next: Quiz — Platforms and Programs.
Mission: freeze YOUR platform pack on disk
1) Write platform, URL, type, date, three reasons. 2) Name $SCOPE_HOST. 3) chmod 600. Never list unenrolled targets as in-scope.
Stuck? Ask Cyberlium AI Mentor
Platform packs save you from testing before you enrolled.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: Platform pack should include enrollment date.
True or False
Knowledge Check
APPLY: A tutorial uses a random shop domain. You:
Multiple choice