> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation/bug-bounty-and-research-resources.md).

# 漏洞赏金与研究资源

用于公开文章、漏洞数据库、利用参考、方法笔记和载荷研究的漏洞赏金与安全研究资源。

使用这些资源进行漏洞研究、公开报告、利用参考和方法论灵感获取。将技术性证明步骤保留在相关的漏洞或报告页面中。

## 资源

<table data-card-size="large" data-column-title-hidden data-view="cards" data-full-width="false" data-search="false"><thead><tr><th>名称</th><th>描述</th><th>官方链接</th><th data-hidden data-card-cover data-type="image">封面图片</th></tr></thead><tbody><tr><td><strong>Pentester Land</strong></td><td>公开的漏洞赏金报告和安全研究参考。</td><td><a href="https://pentester.land/">https://pentester.land/</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-3a8f02fe6c7236f00cde1130ced9b2d2d98c7f39%2Fimage.png?alt=media">image.png</a></td></tr><tr><td><strong>Rapid7 漏洞数据库</strong></td><td>搜索 CVE、漏洞详情、利用参考以及 Metasploit 模块上下文。</td><td><a href="https://www.rapid7.com/db/">https://www.rapid7.com/db/</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-4c9c5842623d6e3642e160cf1c82d9c258833ba8%2FScreenshot%202026-07-20%20155200.png?alt=media">Screenshot 2026-07-20 155200.png</a></td></tr><tr><td><strong>Exploit-DB</strong></td><td>浏览公开利用、概念验证代码、论文以及 Google Hacking Database 参考。</td><td><a href="https://www.exploit-db.com/">https://www.exploit-db.com/</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-b3b1beb4fe63cbea67b9cf15fe8665cace9d40a4%2FScreenshot%202026-07-20%20155602.png?alt=media">Screenshot 2026-07-20 155602.png</a></td></tr><tr><td><strong>HackTricks</strong></td><td>跨技术和环境使用操作手册与攻击路径。</td><td><a href="https://book.hacktricks.xyz/">https://book.hacktricks.xyz/</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-238315153dff778af12e75f13052d2add28bfd63%2FScreenshot%202026-07-20%20155648.png?alt=media">Screenshot 2026-07-20 155648.png</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation/bug-bounty-and-research-resources.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
