The 130 Days Bug Hunting Learning Challenge will officially begin next Sunday, July 12, 2026.

This public learning path is for everyone who wants to build bug hunting and web security skills through structured study, consistent practice, and legal hands-on labs.

You do not need to install complicated tools or purchase expensive courses to get started. The learning path will focus on free resources, browser-based practice platforms, intentionally vulnerable applications, and authorized security labs.

How the Weekly Learning Path Will Work

Every Saturday, subscribers will receive the complete learning plan for the following week directly by email.

Each newsletter will contain a clear day-by-day roadmap covering:

• Day 01

• Day 02

• Day 03

• Day 04

• Day 05

The weekly email will explain exactly what to study, which resources to follow, which legal labs to complete, and what notes to prepare each day.

This means you will not need to search randomly for learning materials. You will receive an organized path that you can follow step by step throughout the week.

What You Will Receive Every Saturday

Each weekly newsletter will include:

• Day-by-day learning topics

• Completely free study resources

• Selected PortSwigger Web Security Academy labs

• Other legal and free practice environments

• Practical learning goals

• Daily completion instructions

• Revision guidance

• A weekly progress checklist

• Notes and research tasks

• Unfinished lab completion guidance

The goal is to make every week structured, practical, and easy to follow.

Recommended Daily Routine

Each active learning day will follow this routine:

Study — 60 minutes

Use the provided resources to understand the topic, concepts, vulnerabilities, and testing methodology.

Practice — 90 minutes

Complete the selected legal labs and apply what you studied.

Notes and Research — 30 minutes

Write down:

• Five things you learned

• One important mistake or problem you faced

• One useful request, response, payload, or concept

• A small checklist or research summary about the topic

The focus is not only on completing labs. The real goal is to understand what you are doing and gradually build your own bug hunting methodology.

Weekly Schedule

Sunday to Thursday

Follow the daily learning path, complete the assigned labs, and prepare your notes.

Friday

Take a break, recover, or catch up on anything you missed.

Saturday

Review the entire week, complete unfinished labs, organize your notes, and receive the next week’s learning path by email.

This schedule will continue throughout the 130 Days Bug Hunting Learning Challenge.

How to Approach the Labs

For every lab, try solving it independently before checking hints or solutions.

When you get stuck:

1. Review the related theory again.

2. Inspect the application carefully.

3. Try a different approach.

4. Use a hint only when necessary.

5. Understand the solution instead of copying it.

6. Reset the lab and solve it again independently.

Getting stuck is part of the learning process. The purpose of this challenge is not to finish labs as quickly as possible. It is to understand the vulnerability, recognize the testing process, and learn how to apply the same methodology in other authorized environments.

Who Can Join?

This public learning path is suitable for:

• Beginners starting their bug hunting journey

• Cybersecurity learners looking for a structured roadmap

• People who were not selected for the private Discord cohort

• Learners who want free and legal practice resources

• Anyone willing to study and practice consistently

You can follow the challenge independently from anywhere.

There is no guarantee that completing this challenge will make someone a professional bug hunter. Progress will depend on consistency, curiosity, practice, research, and the ability to understand mistakes.

I am also a learner. This challenge is an opportunity for us to learn, practice, and improve together.

Safety and Ethics

All practice must be performed only on:

• Legal security labs

• Intentionally vulnerable applications

• Authorized bug bounty programs

• Systems where you have clear permission to test

Never test a real website, organization, application, account, or device without authorization.

Always read the program rules, understand the scope, avoid unnecessary data access, and never disclose sensitive information publicly.

Bug hunting is not only about technical ability. Responsible behavior, clear reporting, and respect for authorization are equally important.

Important Dates

First Weekly Learning Path Email: Saturday, July 11, 2026
Public Challenge Starts: Sunday, July 12, 2026
New Learning Path Delivery: Every Saturday

The first email will contain the complete Week 01 learning path, including the resources and tasks for Day 01 through Day 05.

Make sure you are subscribed so the weekly roadmap reaches your inbox.

Check your Promotions or Spam folder if you do not see the email, and mark the newsletter as important so you do not miss future learning paths.

Prepare for Week 01

Before the challenge begins:

• Create your required free learning-platform accounts

• Prepare a notebook or digital note-taking system

• Set aside daily study and practice time

• Commit to legal and responsible learning

• Be ready to stay consistent

The journey starts next Sunday.

Subscribe now and prepare to receive the first day-by-day learning path this Saturday.

Learn Together • Hunt Together • Grow Together

— 0xmun1r