# Web Hacking + Bug Bounty Tricks These are my **bug bounty** notes that I have gathered from various sources. ## Table of Contents * [2FA/OTP Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/2FA_OTP_Bypass.md) * [API Key Leak](https://github.com/Mehdi0x90/Web_Hacking/blob/main/API%20Key%20Leak.md) * [CSRF](https://github.com/Mehdi0x90/Web_Hacking/blob/main/CSRF.md) * [File Upload](https://github.com/Mehdi0x90/Web_Hacking/blob/main/File%20Upload.md) * [LoggerPlusPlus](https://github.com/Mehdi0x90/Web_Hacking/blob/main/LoggerPlusPlus.md) * [NoSQL Injection](https://github.com/Mehdi0x90/Web_Hacking/blob/main/NoSQL%20Injection.md) * [Open Redirect](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Open%20Redirect.md) * [Race Condition](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Race%20Condition.md) * [Recon](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Recon.md) * [SSRF](https://github.com/Mehdi0x90/Web_Hacking/blob/main/SSRF.md) * [XSS](https://github.com/Mehdi0x90/Web_Hacking/blob/main/XSS.md) ***Will always be updated...***