What is this?
Hacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.
Hacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.So is this repo the class itself, or the code behind it?It is the source code of the Hacker101.com website itself. The class runs online at that site; this repo is a Ruby-built site you can clone, build and serve on your own machine.
It is the source code of the Hacker101.com website itself. The class runs online at that site; this repo is a Ruby-built site you can clone, build and serve on your own machine.Can I run the site locally? What do I need installed?You need Ruby (rbenv is suggested) and bundler (gem install bundler). Then clone this repo, let bundler pull the dependencies, build the site and spin up the server, and browse to it.
You need Ruby (rbenv is suggested) and bundler (gem install bundler). Then clone this repo, let bundler pull the dependencies, build the site and spin up the server, and browse to it.Do I need to run this repo at all, or can I just take the class online?Just take it online — the class lives at Hacker101.com and is free. Running the repo yourself is only for self-hosting the site or working on its content.
Just take it online — the class lives at Hacker101.com and is free. Running the repo yourself is only for self-hosting the site or working on its content.Which vulnerabilities does the material cover?The repo's topics list the web security classics: XSS, SQL injection, CSRF, clickjacking, session fixation and unchecked redirects — plus a mobile security track.
The repo's topics list the web security classics: XSS, SQL injection, CSRF, clickjacking, session fixation and unchecked redirects — plus a mobile security track.Is Hacker101 tied to the HackerOne bug bounty platform?Yes — it comes from HackerOne (the Hacker0x01 organization) and is pitched at people interested in bug bounties, so it doubles as an on-ramp into that field.
Yes — it comes from HackerOne (the Hacker0x01 organization) and is pitched at people interested in bug bounties, so it doubles as an on-ramp into that field.What are similar projects?Resources-for-Beginner-Bug-Bounty-Hunters, Claude-BugHunter, SafeLine, DVWA, bug-bounty-hunting-prompts, xray, Agentic-Bug-Hunter, Claude-Red
Resources-for-Beginner-Bug-Bounty-Hunters, Claude-BugHunter, SafeLine, DVWA, bug-bounty-hunting-prompts, xray, Agentic-Bug-Hunter, Claude-RedWhich topics is it in?csrf, sql-injection, xss, mobile-security, bug-bounty, ethical-hacking, scss, web-security, vulnerability, ruby, curriculum, hacking
csrf, sql-injection, xss, mobile-security, bug-bounty, ethical-hacking, scss, web-security, vulnerability, ruby, curriculum, hacking