70 lines
4.4 KiB
Markdown
70 lines
4.4 KiB
Markdown
# Web Hacking + Bug Bounty Tricks
|
|
|
|
|
|
These are my **Bug Bounty / Pentest** notes that I have gathered from various sources.
|
|
|
|
You can also contribute.
|
|
|
|
[](https://twitter.com/mehdi0x90)
|
|
|
|
|
|
## List of Vulnerabilities
|
|
* [API Key Leak](https://github.com/Mehdi0x90/Web_Hacking/blob/main/API%20Key%20Leak.md)
|
|
* [CRLF Injection](https://github.com/Mehdi0x90/Web_Hacking/blob/main/CRLF.md)
|
|
* [CSRF](https://github.com/Mehdi0x90/Web_Hacking/blob/main/CSRF.md)
|
|
* [Cache Poisoning / Deception](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Cache%20Deception.md)
|
|
* [DOM Clobbering](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Dom%20Clobbering.md)
|
|
* [File Inclusion](https://github.com/Mehdi0x90/Web_Hacking/blob/main/File%20Inclusion.md)
|
|
* [File Upload](https://github.com/Mehdi0x90/Web_Hacking/blob/main/File%20Upload.md)
|
|
* [GraphQL](https://github.com/Mehdi0x90/Web_Hacking/blob/main/GraphQL.md)
|
|
* [Host Header Injection](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Host%20Header%20Injection.md)
|
|
* [IDOR](https://github.com/Mehdi0x90/Web_Hacking/blob/main/IDOR.md)
|
|
* [JWT](https://github.com/Mehdi0x90/Web_Hacking/blob/main/JWT.md)
|
|
* [NoSQLi](https://github.com/Mehdi0x90/Web_Hacking/blob/main/NoSQL%20Injection.md)
|
|
* [Open Redirect](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Open%20Redirect.md)
|
|
* [Race Condition](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Race%20Condition.md)
|
|
* [Reverse Tab Nabbing](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Reverse%20Tab%20Nabbing.md)
|
|
* [SQLi](https://github.com/Mehdi0x90/Web_Hacking/blob/main/SQL%20Injection.md)
|
|
* [SSRF](https://github.com/Mehdi0x90/Web_Hacking/blob/main/SSRF.md)
|
|
* [XSS](https://github.com/Mehdi0x90/Web_Hacking/blob/main/XSS.md)
|
|
* [XXE](https://github.com/Mehdi0x90/Web_Hacking/blob/main/XXE.md)
|
|
|
|
## Bypass Techniques
|
|
* [2FA / OTP Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/2FA_OTP_Bypass.md)
|
|
* [403 Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/403%20Bypass.md)
|
|
* [429 Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/429%20Bypass.md)
|
|
* [Captcha Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Captcha%20Bypass.md)
|
|
* [CSP Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/CSP%20Bypass.md)
|
|
* [Login Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Login%20Bypass.md)
|
|
* [Rate Limit Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Rate%20Limit%20Bypass.md)
|
|
* [Reset Password Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Reset%20Password%20Bypass.md)
|
|
* [WAF Detect / Bypass](https://github.com/Mehdi0x90/Web_Hacking/blob/main/WAF%20Bypass.md)
|
|
|
|
|
|
## Recon & OSINT Techniques
|
|
* [Recon](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Recon.md)
|
|
* [OSINT](https://github.com/Mehdi0x90/Web_Hacking/blob/main/OSINT.md)
|
|
|
|
## Top Tools & Extensions
|
|
* [inql](https://github.com/doyensec/inql) - Burp extension for advanced GraphQL testing
|
|
* [Logger++](https://github.com/Mehdi0x90/Web_Hacking/blob/main/LoggerPlusPlus.md) - Burp extension, a multithreaded logging extension for Burp Suit
|
|
* [param-miner](https://github.com/PortSwigger/param-miner) - Burp extension, identifies hidden, unlinked parameters
|
|
|
|
## Mindmaps for Bug Hunters
|
|
* [XXE](mindmaps-pdf/XXE.pdf)
|
|
* [SSRF](mindmaps-pdf/SSRF.pdf)
|
|
* [CORS](mindmaps-pdf/CORS.pdf)
|
|
* [Prototype Pollution](mindmaps-pdf/Prototype%20Pollution.pdf)
|
|
|
|
## Secure Coding
|
|
* [2FA](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Secure%20Coding%20-%202FA.md)
|
|
* [Password Reset](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Secure%20Coding%20-%20Password%20Reset.md)
|
|
* [Session Fixation](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Secure%20Coding%20-%20Session%20Fixation.md)
|
|
* [Broken Object Level Authorization](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Secure%20Coding%20-%20Broken%20Object%20Level%20Authorization.md)
|
|
* [Broken Authentication](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Secure%20Coding%20-%20Broken%20Authentication.md)
|
|
* [Broken Object Property Level Authorization](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Secure%20Coding%20-%20Broken%20Object%20Property%20Level%20Authorization.md)
|
|
* [Unrestricted Resource Consumption](https://github.com/Mehdi0x90/Web_Hacking/blob/main/Secure%20Coding%20-%20Unrestricted%20Resource%20Consumption.md)
|
|
|
|
-----
|
|
*All content of this repository will always be updated...*
|