This is a good one.
https://www.hackerone.com/
https://www.bugcrowd.com/
That’s also a good one. Thing to note is a lot of the material they give out is dated. And there is a book they mention you should get that you get for free from having a hackerone account.
Big thing to note is it’s nearly impossible to make a living or anything worth while with a public bug bounty. If you can find something, then make sure you add it to your job portfolio. But realistically you won’t be able to make a living without working with a company (and the job security isn’t there by any means).
I’m telling you this because I found this out the hard way. The advantage back in the day is not many was into this, and the barrier to entry was low. But like anything with a low barrier to entry, it is a matter of time before it’s worthless to go out of your way.
