All about bug bounty
These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too!
List
- Arbitrary File Upload
- Business Logic Errors
- CRLF Injection
- Cross Site Request Forgery (CSRF)
- Cross Site Scripting (XSS)
- Denial of Service (DoS)
- Exposed Source Code
- Host Header Injection
- Insecure Direct Object References (IDOR)
- Local File Inclusion (LFI)
- NoSQL Injection
- OAuth Misconfiguration
- Open Redirect
- Remote File Inclusion (RFI)
- SQL Injection (SOON)
- Web Cache Poisoning
List Bypass
Miscellaneous
- Account Takeover
- Broken Link Hijacking
- Default Credentials
- Email Spoofing
- JWT Vulnerabilities
- Mass Assignment
- Password Reset Flaws
- Tabnabbing