Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
api-pentestapi-securitybug-bounty-huntersbugbountybypasscheatsheetenumerationexploithackingowasppayloadspenetration-testingpentestreconredteamsecurityvulnerabilityweb-application-securitywebhackingwebsecurity
| mindmaps-pdf | ||
| 2FA_OTP_Bypass.md | ||
| 403 Bypass.md | ||
| 429 Bypass.md | ||
| API Key Leak.md | ||
| Cache Deception.md | ||
| Captcha Bypass.md | ||
| CSP Bypass.md | ||
| CSRF.md | ||
| Dom Clobbering.md | ||
| File Inclusion.md | ||
| File Upload.md | ||
| GraphQL.md | ||
| IDOR.md | ||
| JWT.md | ||
| LoggerPlusPlus.md | ||
| Login Bypass.md | ||
| NoSQL Injection.md | ||
| Open Redirect.md | ||
| OSINT.md | ||
| Race Condition.md | ||
| Rate Limit Bypass.md | ||
| README.md | ||
| Recon.md | ||
| Reset Password Bypass.md | ||
| SQL Injection.md | ||
| SSRF.md | ||
| WAF Bypass.md | ||
| XSS.md | ||
| XXE.md | ||
Web Hacking + Bug Bounty Tricks
These are my Bug Bounty / Pentest notes that I have gathered from various sources.
You can also contribute.
List of Vulnerabilities
- API Key Leak
- CSRF
- Cache Poisoning / Deception
- DOM Clobbering
- File Inclusion
- File Upload
- GraphQL
- IDOR
- JWT
- NoSQLi
- Open Redirect
- Race Condition
- SQLi
- SSRF
- XSS
- XXE
Bypass Techniques
- 2FA / OTP Bypass
- 403 Bypass
- 429 Bypass
- Captcha Bypass
- CSP Bypass
- Login Bypass
- Rate Limit Bypass
- Reset Password Bypass
- WAF Detect / Bypass
Recon & OSINT Techniques
Top Tools & Extensions
Mindmaps for Bug Hunters
All content of this repository will always be updated...