vos9/Web_Hacking
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
155 Commits 1 Branch 0 Tags 763 KiB
Markdown 100%
c106161289
Go to file
Mehdi c106161289
Update Captcha Bypass.md
2023-12-07 10:26:41 +03:30
mindmaps-pdf Add files via upload 2023-10-01 09:09:32 +03:30
2FA_OTP_Bypass.md Update 2FA_OTP_Bypass.md 2023-08-31 13:44:47 +03:30
403 Bypass.md Update 2023-09-15 16:18:51 +03:30
429 Bypass.md Update 429 Bypass.md 2023-09-15 16:37:40 +03:30
API Key Leak.md Update API Key Leak.md 2023-08-23 14:53:35 +03:30
Cache Deception.md UpdateCache Deception.md 2023-09-18 09:36:02 +03:30
Captcha Bypass.md Update Captcha Bypass.md 2023-12-07 10:26:41 +03:30
CRLF.md Create CRLF.md 2023-10-31 12:12:40 +03:30
CSP Bypass.md Create CSP Bypass.md 2023-09-03 14:30:14 +03:30
CSRF.md Update CSRF.md 2023-08-30 10:26:09 +03:30
Dom Clobbering.md Create Dom Clobbering.md 2023-09-08 15:44:38 +03:30
File Inclusion.md Create File Inclusion.md 2023-09-19 14:21:56 +03:30
File Upload.md Update File Upload.md 2023-08-27 16:22:11 +03:30
GraphQL.md Update GraphQL.md 2023-10-05 09:31:49 +03:30
Host Header Injection.md Create Host Header Injection.md 2023-10-30 11:41:53 +03:30
IDOR.md Update IDOR.md 2023-09-02 15:51:37 +03:30
JWT.md Update JWT.md 2023-09-15 15:16:17 +03:30
LoggerPlusPlus.md Update LoggerPlusPlus.md 2023-10-05 09:42:26 +03:30
Login Bypass.md Update Login Bypass.md 2023-09-17 14:28:27 +03:30
NoSQL Injection.md Update NoSQL Injection.md 2023-12-06 13:32:14 +03:30
Open Redirect.md Update Open Redirect.md 2023-08-23 15:41:52 +03:30
OSINT.md Update OSINT.md 2023-09-16 17:35:51 +03:30
Race Condition.md Update Race Condition.md 2023-08-24 13:57:56 +03:30
Rate Limit Bypass.md Create Rate Limit Bypass.md 2023-09-18 12:10:21 +03:30
README.md Update README.md 2023-12-04 15:36:03 +03:30
Recon.md Update Recon.md 2023-12-02 14:10:38 +03:30
Reset Password Bypass.md Create Reset Password Bypass.md 2023-09-02 16:52:19 +03:30
Reverse Tab Nabbing.md Create Reverse Tab Nabbing.md 2023-12-04 10:49:19 +03:30
Secure Coding - 2FA.md Create Secure Coding - 2FA.md 2023-12-04 15:34:32 +03:30
Secure Coding - Password Reset.md Update Secure Coding - Password Reset.md 2023-12-03 16:02:27 +03:30
Secure Coding - Session Fixation.md Create Secure Coding - Session Fixation.md 2023-12-02 10:24:21 +03:30
SQL Injection.md Update SQL Injection.md 2023-09-17 13:43:34 +03:30
SSRF.md Update SSRF.md 2023-11-17 15:18:21 +03:30
WAF Bypass.md Update WAF Bypass.md 2023-11-16 13:29:29 +03:30
XSS.md Update XSS.md 2023-09-16 17:27:45 +03:30
XXE.md Create XXE.md 2023-09-19 09:39:45 +03:30

README.md

Web Hacking + Bug Bounty Tricks

5829442

These are my Bug Bounty / Pentest notes that I have gathered from various sources.

You can also contribute.

Twitter URL

List of Vulnerabilities

Bypass Techniques

Recon & OSINT Techniques

Top Tools & Extensions

  • inql - Burp extension for advanced GraphQL testing
  • Logger++ - Burp extension, a multithreaded logging extension for Burp Suit
  • param-miner - Burp extension, identifies hidden, unlinked parameters

Mindmaps for Bug Hunters

Secure Coding

All content of this repository will always be updated...