Bug Bounty Testing, Techniques, and Tools

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Bug Bounty in Cybersecurity.

Thanks to all contributors, you're awesome and wouldn't be possible without you! Our goal is to build a categorized community-driven collection of very well-known resources.

`What is Bug Bounty?`

A is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.

`Table of Contents`

[HTTP Header Injection]

`Cross-Site Scripting (XSS)`

- he is able to make stored XSS from a irrelevant domain to main facebook domain

`Brute Force`

`SQL Injection`

`Stealing Access Token`

`Google oauth bypass`

`CSRF`

Remote Code Execution

- Alert, God-like Write-up, make sure you know what is ROP before clicking, which I don't =(

`Deserialization`

`Image Tragick`

Insecure Direct Object Reference (IDOR)

- It's Google Vulnerability, so it's worth reading, as generally it is more difficult to find Google vulnerability

XXE

Unrestricted File Upload

Server Side Request Forgery (SSRF)

Race Condition

Business Logic Flaw

`Authentication Bypass`

`HTTP Header Injection`

`Subdomain Takeover`

`License`

PreviousAwesome Ai Talk NextCybersources

Last updated 2 months ago