M0hitgupta / AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

All about bug bounty

These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too!

List

• Business Logic Errors
• Cross Site Request Forgery (CSRF)
• Cross Site Scripting (XSS)
• Denial of Service (DoS)
• Exposed Source Code
• Host Header Injection
• Insecure Direct Object References (IDOR)
• Web Cache Poisoning

List Bypass

• Bypass 2FA
• Bypass 403
• Bypass Captcha
• Bypass File Upload
• Bypass Rate Limit

List CMS

• WordPress

List Framework

• Laravel
• Zend

Miscellaneous

• Account Takeover
• Broken Link Hijacking
• Email Spoofing
• JWT Vulnerabilities
• Mass Assignment
• Password Reset Flaws
• Tabnabbing
• Unauthenticated Jira CVE

Reconnaissance

• Scope Based Recon
• Github Dorks
• Google Dorks
• Shodan Dorks

Coming Soon!