title
owasp.org - to learn all about web vulnerabilities.
hackerone.com - to do bounty programs legally.