Web_Hacking/README.md

# Web Hacking + Bug Bounty Tricks
![5829442](https://github.com/Mehdi0x90/Web_Hacking/assets/17106836/5ffcc3e2-3cc0-4327-b5f9-00c58f524c6b)

These are my **Bug Bounty / Pentest** notes that I have gathered from various sources. 

You can also contribute.

[![Twitter URL](https://img.shields.io/twitter/follow/mehdi0x90)](https://twitter.com/mehdi0x90)


## List of Vulnerabilities
* [API Key Leak](https://github.com/Mehdi0x90/Web_Hacking/blob/main/API%20Key%20Leak.md)
* [CSRF](https://github.com/Mehdi0x90/Web_Hacking/blob/main/CSRF.md)
* [Cache Poisoning / Deception](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Cache%20Deception.md)
* [DOM Clobbering](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Dom%20Clobbering.md)
* [File Upload](https://github.com/Mehdi0x90/Web_Hacking/blob/main/File%20Upload.md)
* [IDOR](https://github.com/Mehdi0x90/Web_Hacking/blob/main/IDOR.md)
* [JWT](https://github.com/Mehdi0x90/Web_Hacking/blob/main/JWT.md)
* [NoSQLi](https://github.com/Mehdi0x90/Web_Hacking/blob/main/NoSQL%20Injection.md)
* [Open Redirect](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Open%20Redirect.md)
* [Race Condition](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Race%20Condition.md)
* [SQLi](https://github.com/Mehdi0x90/Web_Hacking/blob/main/SQL%20Injection.md)
* [SSRF](https://github.com/Mehdi0x90/Web_Hacking/blob/main/SSRF.md)
* [XSS](https://github.com/Mehdi0x90/Web_Hacking/blob/main/XSS.md)
* [XXE](https://github.com/Mehdi0x90/Web_Hacking/blob/main/XXE.md)

## Bypass Techniques
* [2FA / OTP Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/2FA_OTP_Bypass.md)
* [403 Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/403%20Bypass.md)
* [429 Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/429%20Bypass.md)
* [Captcha Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Captcha%20Bypass.md)
* [CSP Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/CSP%20Bypass.md)
* [Login Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Login%20Bypass.md)
* [Rate Limit Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Rate%20Limit%20Bypass.md)
* [Reset Password Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Reset%20Password%20Bypass.md) 


## Recon & OSINT Techniques
* [Recon](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Recon.md)
* [OSINT](https://github.com/Mehdi0x90/Web_Hacking/blob/main/OSINT.md)

## Top Tools & Extensions
* [Logger++ (Burp extension)](https://github.com/Mehdi0x90/Web_Hacking/blob/main/LoggerPlusPlus.md)
* [param-miner (Burp extension)](https://github.com/PortSwigger/param-miner)


-----
*All content of this repository will always be updated...*