Obtaining the CBBH certification

I’m proud to announce that I have obtained my Certified Bug Bounty Hunter (CBBH) certification. It was quite a challenging exam, but that made it fun. I managed to score a perfect 100/100 on the exam and received no feedback on my report.

How to Prepare

There are a few ways to prepare for the certification:

1. Complete the full course path: This is required for the certification, so make sure you go through all the material thoroughly.
2. Take good notes: I use Obsidian, which is an excellent note-taking app. If I forget a payload or miss something during enumeration, I can always use the search functionality [Ctrl + Shift + F] to quickly find what I need by searching for line:(something I want).
3. Use the course search functionality: You can reverse-search vulnerabilities to learn how to exploit them and easily revisit the relevant sections of the course.
4. Start the exam when you’re ready: Once you’ve learned all the content and it’s fresh in your mind, go ahead and start the exam. Make sure you’re not in the middle of something else, like a vacation, so you can focus fully.
5. Enjoy the challenge: This is very important. Don’t get frustrated, and if you do, take a break or go for a walk. Some people even take a whole day off to clear their minds and refresh their thinking.

There’s nothing more I can say that would effectively help you ace the CBBH certification.

My Thoughts

I think the exam was really fun, and I thoroughly enjoyed it. I got stuck on the second day, but shortly after, I was able to find my way out and complete it.

I started the exam on a Thursday and submitted it on a Monday, taking a total of five days to complete. I began reporting on Saturday—yes, I’m a bit of a perfectionist when it comes to reporting for exams.

For reporting, I’d recommend using Sysreptor. I had so many issues with Word that I was reminded of how frustrating it can be to report using it. In the real world, you’d typically use a templating tool for creating findings, so Sysreptor is a great choice.

Summary

Enjoy the exam, report using Sysreptor, and take breaks when needed.