The newest Bug Bounty resources are on the Bug Bounty page. For a reading order instead of a date order, see the Bug Bounty learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2024-10-07 2024 | Bounty Security Releases GBounty: Our Web Scanning Tools Are Now Open Source news 2 min read | Library of open-source web scanning tools, including the GBounty Scanner for high-speed vulnerability discovery, customizable GBounty Multi-Step Profiles for defining test sequences, a GBounty Profiles Designer graphical interface for creating these profiles, and the Export to GBounty Burp Suite extension for seamlessly integrating Burp Suite requests into scanner workflows. |
| 2024-10-03 2024 | Top 10 Browser Extensions Every Bug Bounty Hunter Needs beginner Burp | As bug bounty hunters, we need to save time by avoiding constant switching between the terminal, multiple tabs, Burp Suite (including… |
| 2024-10-01 2024 | GitHub - bl4de/security-tools: My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty. beginner Python | My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty. - bl4de/security-tools |
| 2024-09-27 2024 | Payloads/ssrf.txt at main · 1BlackLine/Payloads intermediate 1 min read SSRF | Library of Server-Side Request Forgery (SSRF) payloads detailing various techniques for bypassing filters and exploiting internal services. It includes examples for localhost, IP address variations, IPv6, octal and hexadecimal encodings, gopher, dict, and file schemes, as well as specific cloud metadata endpoints like those for AWS EC2, Google Compute Engine, and Hetzner. The collection also demonstrates SSRF through jar, file, and other less common URL schemes. |
| 2024-09-24 2024 | xssorRecon/xss0rRecon.sh at main · xss0r/xssorRecon beginner 25 min read Recon XSS | Library for automating web application security reconnaissance, the xssorRecon.sh script helps discover vulnerabilities. It automates tasks including domain enumeration, URL crawling and filtering, and parameter discovery using tools like HiddenParamFinder. The script also prepares for XSS detection and analyzes query string URLs, culminating in the launch of the xss0r tool for in-depth vulnerability assessment. It includes installation steps for necessary dependencies and offers a guide for deploying on VPS servers. |
| 2024-09-16 2024 | Automating the CORS Vulnerability Scan intermediate API Sec AuthZ | When conducting a bug bounty, automating your scanning process not only saves time but ensures you don’t miss common vulnerabilities. One… |
| 2024-09-16 2024 | What is Prototype Pollution? beginner | Bug Bounty Essentials by Karthikeyan Nagaraj → cyberw1ng.medium.com |
| 2024-09-15 2024 | Mastering WordPress Penetration Testing: A Step-by-Step Guide intermediate 10 min read | Toolset for WordPress penetration testing, including Wappalyzer for technology profiling, WPintel for detailed WordPress information like versions and vulnerabilities, NMAP for network scanning, FFuF for directory discovery and fuzzing, and Nuclei for template-based vulnerability scanning. The guide also covers manual techniques such as username enumeration and XML-RPC exploitation, as well as Cross-Site Port Attacks (XSPA). |
| 2024-09-14 2024 | Acquiring Malicious Browser Extension Samples on a Shoestring Budget advanced 11 min read | Library for acquiring malicious browser extension samples using free resources, including cryptanalysis of obfuscated PowerShell scripts. It details techniques for finding initial samples via services like urlscan and MalwareBazaar, then pivots to acquiring and decrypting newer samples by analyzing file structures and performing XOR key and substitution mapping recovery. The library provides a practical approach to obtaining such samples without enterprise-level tools. |
| 2024-09-14 2024 | Mastering GraphQL API Pentesting: The Ultimate Resource Guide beginner GraphQL | Hello! I’m Raunak Gupta, a Security Researcher, Bug Bounty Hunter, and Computer Science student from India. Today, I’m excited to share all… |
| 2024-09-13 2024 | GitHub - xss0r/xssorRecon: Automate Recon XSS Bug Bounty beginner Recon XSS | Library for automating XSS bug bounty reconnaissance. This tool requires downloading and extracting all necessary files, including wordlists and the xssorRecon tool itself, into a single directory. A free 5-day professional plan license is available from the 10th to the 15th of each month via store.xss0r.com. |
| 2024-08-31 2024 | SSRFUtility - SSRF Exploitation Tool intermediate SSRF | A tool to help you exploit SSRF vulnerabilities and get these bounties! |
| 2024-08-27 2024 | This Teen Hacker Found Bugs in School Software That Exposed Millions of Records news 6 min read | Writeup detailing Bill Demirkapi's discovery of critical vulnerabilities in Blackboard and Follett school software, including SQL injection and cross-site scripting flaws. These bugs potentially exposed millions of student and teacher records, encompassing grades, immunization data, passwords, and personal information. The findings highlight significant security weaknesses in educational technology and the challenges researchers face in getting vendors to address them. → wired.com |
| 2024-08-18 2024 | Using Firefox Add-Ons for #BugBounty beginner | Recently I posted a tweet about using Firefox Add-Ons for Bug Bounty Hunting, so I figured out I should write a guide on using it. |
| 2024-08-02 2024 | Cartesi Honeypot Challenge beginner | Cartesi Honeypot Challenge via /r/bugbounty https://ift.tt/N8IBERh |
| 2024-07-30 2024 | JS Link Finder Burp Suite Extension Guide intermediate Burp | Improve your bug bounty hunting, pentesting, and appsec skills with the JS Link Finder Burp Suite Extension. Discover hidden endpoints and… |
| 2024-07-28 2024 | security-study-plan/web-pentest-study-plan.md at main · jassics/security-study-plan beginner 6 min read Recon | Library outlining a structured, milestone-based web penetration testing study plan. It details key concepts like HTTP methods and response codes, vulnerability types including XSS, SQLi, and JWT exploitation, and essential tools such as Burp Suite, Nmap, and Metasploit. The plan emphasizes hands-on lab practice with platforms like Hack The Box and OWASP Juice Shop, alongside recommended reading and courses, guiding learners towards entry-level pentesting roles. |
| 2024-07-27 2024 | Udemy - Bug Bounty Hunting Guide to an Advanced Earning Method - Google Drive intermediate | Udemy - Bug Bounty Hunting Guide to an Advanced Earning Method - Google Drive |
| 2024-07-22 2024 | DOM Based XSS | OWASP Foundation beginner 5 min read XSS | Reference for DOM Based XSS, also known as "type-0 XSS," detailing how client-side scripts execute unexpectedly due to modifications in the DOM environment. It contrasts this with stored and reflected XSS, highlighting attacks utilizing URI fragments to avoid server-side detection, such as the universal XSS against the Acrobat PDF plugin. The entry also mentions testing tools like DOM Snitch and defensive techniques discussed in research papers and presentations. → owasp.org |
| 2023-12-21 2023 | The Unsinkable Maddie Stone Googles Bug-Hunting Badass news 18 min read | Library for analyzing actively exploited software flaws, including zero-days found in security scanning tools and Android malware. It focuses on understanding attacker behavior, identifying novel techniques, and determining how structural improvements can mitigate entire classes of exploits, aiming to make zero-day vulnerabilities harder to find and exploit in the wild. → wired.com |
| 2023-12-03 2023 | HowToHunt beginner 1 min read | Library of practical guides and methodologies for vulnerability hunting. This collaborative repository offers step-by-step techniques for finding specific bugs, focusing on actionable advice and real-world examples. It serves as a resource for both beginners and experienced hunters to enhance their bug hunting skills, with contributions from experienced security professionals. |
| 2023-11-27 2023 | Solving HackThisSite Programming Level 1 with Ronin beginner 1 min read | Library for Ruby that facilitates solving HackThisSite Programming Level 1 by unscrambling words. It utilizes the `wordlist` gem to process a ZIP archive of words, builds a lookup table by sorting characters of each word, and then deciphers scrambled words by matching their sorted character sequences. This approach provides an efficient solution to the challenge. |
| 2023-11-05 2023 | Offensive C# advanced RCE | Library for offensive C# development, teaching basics from C# fundamentals to advanced red team tradecraft. Learn to build tools for Active Directory enumeration and attacks, create .NET loaders, implement persistence, and leverage WinAPI for techniques like process hollowing, token enumeration, and shellcode injection. The curriculum covers C2 server development, PE backdoor creation, and API hashing/hooking for sophisticated offensive capabilities. |
| 2023-11-05 2023 | BugBountyHunting.com - A community-curated Resource for Bug Bounty Hunting beginner | BugBountyHunting.com - A community-curated Resource for Bug Bounty Hunting https://ift.tt/YoWdJOL |
| 2023-10-25 2023 | Broad scope bug bounties handbook v1 beginner | https://ift.tt/RqE7Mny |
| 2023-10-12 2023 | Web AppSec Interview Questions beginner 16 min read API Sec | Reference for web application security interview questions, covering topics like Web Cache Deception, Session Fixation, SQL Injection variants (Boolean *Error* Inferential), DOM Clobbering, HTTP Request Smuggling (TE.TE), HTTP Parameter Pollution, IDOR, JWKs/JKUs, Business Logic testing, Server-Side Template Injection, WebSocket security, Content Security Policy (CSP), stateless authentication, CSRF mitigation, XXE Injection, DOM-based XSS, CORS preflight requests, Insecure Deserialization, file upload vulnerabilities, Mass Assignment, GraphQL batching, type juggling, and sensitive data exposure techniques. |
| 2023-10-05 2023 | Useful Websites for Pentesters & Hackers beginner Recon | Useful Websites for Pentesters & Hackers https://ift.tt/wL3ZVXG |
| 2023-10-05 2023 | Bug Bounty Hunting Guide: Essential Tools and Strategies beginner Recon | Bug Bounty Hunting Guide: Essential Tools and Strategies https://ift.tt/oqOZFys |
| 2023-09-22 2023 | IDOR - how to predict an identifier? Bug bounty case study intermediate IDOR Talks | The content discusses IDOR (Insecure Direct Object Reference) vulnerability and how to predict an identifier in bug bounty programs. It likely provides a case study or tutorial on exploiting IDOR vulnerabilities for ethical hacking purposes. The video on YouTube may offer insights into identifying and exploiting these vulnerabilities to secure systems better. |
| 2023-09-22 2023 | reddelexc/hackerone-reports beginner 2 min read | Library of curated HackerOne reports, organized to identify top vulnerabilities and programs. Includes categorized lists of XSS, XXE, IDOR, RCE, SQLi, SSRF, and other bug types, alongside rankings for programs like Mail.ru, Shopify, Twitter, and Uber. Python 3 scripts, requiring chromedriver and Chromium, are provided to update the raw data in data.csv, processing reports through fetching, uniqueness checks, filling, and rating stages. |
| 2023-09-22 2023 | Writeups beginner | Writeups https://ift.tt/PJUnIMy |
| 2023-09-22 2023 | How to turn SQL injection into an RCE or a file read? Case study of 128 bug bounty reports advanced RCE SQLi Talks | The content discusses techniques for exploiting SQL injection vulnerabilities to achieve Remote Code Execution (RCE) or read files. It presents a case study based on 128 bug bounty reports, providing insights into the process of leveraging SQL injection for more severe attacks. The video likely delves into practical examples, demonstrating how attackers can escalate the impact of SQL injection vulnerabilities to gain unauthorized access or execute malicious code on a target system. |
| 2023-08-29 2023 | Pygoat - Learn Django security the hard way beginner 9 min read Python | Library for learning Django security by attacking and defending the intentionally vulnerable application Pygoat. This resource covers OWASP Top 10 vulnerabilities, including Broken Access Control and Sensitive Data Exposure, providing mitigation strategies for Django applications. It addresses specific risks like hard-coded passwords and broken cryptography, and discusses SQL injection and insecure direct object references. The library emphasizes secure design patterns, threat modeling, and proper input validation to fortify web applications. |
| 2023-08-20 2023 | Pentest-Cheat-Sheets beginner 7 min read Recon | Cheatsheet for penetration testing tasks, offering code snippets and commands for efficient workflow. It includes commands for DNS enumeration using tools like `dnsenum` and `fierce`, network scanning with `nmap`, file transfer and reverse shells with `nc` and `ncat`, SNMP enumeration using `onesixtyone` and `snmp-check`, directory brute-forcing with `dirsearch` and `dirb`, RDP exploitation with `xfreerdp` and `crowbar`, SMB client interactions with `pth-smbclient`, and SQL injection exploitation with `sqlmap`. |
| 2023-08-11 2023 | YesWeHack #1 Bug Bounty Platform in Europe beginner | YesWeHack #1 Bug Bounty Platform in Europe https://ift.tt/N0aPy8c → yeswehack.com |
| 2023-08-11 2023 | How To Hack Web Applications in 2022: Part 1 beginner 15 min read | Library for web application security testing that details techniques for identifying and exploiting vulnerabilities like SQL Injection, Code Injection, XSS, Defacement, Cookie poisoning, and Remote Code Execution. It outlines the setup process using Burp Suite and discusses common web application architectures, including Single Page Applications and Traditional Web Applications, referencing the OWASP Top 10 as a standard vulnerability guide. → labs.detectify.com |
| 2023-08-11 2023 | JeffCX/collection-web3-bug-bounty beginner 2 min read | Collection of independently hosted Web3 bug bounty programs, curating a comprehensive list of initiatives offering substantial, six-figure rewards. This resource aims to incentivize ethical hackers and security researchers to identify and report vulnerabilities in decentralized applications (dApps), blockchain networks, smart contracts, and decentralized finance (DeFi) protocols, thereby enhancing the security of the evolving Web3 ecosystem. Contributions are welcomed via pull requests on GitHub, detailing project names, bounty amounts, and program links for inclusion in the sorted list. |
| 2023-08-11 2023 | The Ultimate Guide to Finding Bugs With Nuclei intermediate 43 min read | Library for efficient, extensible vulnerability scanning using YAML-based templates. Nuclei supports HTTP, DNS, SSL, and raw TCP protocols, allowing users to define custom checks for vulnerabilities. It can scan thousands of hosts rapidly, integrates into existing workflows, and offers template filtering by technology, severity, or CVE. Advanced features include custom template creation, fuzzing, multi-step interactions, and support for network, DNS, file, and headless modes. |
| 2023-07-30 2023 | 0xPugazh/One-Liners beginner 6 min read | Library aggregating numerous command-line one-liners for application security reconnaissance and vulnerability testing. It compiles practical examples for subdomain enumeration using tools like subfinder, dnsx, and httpx, alongside methods for discovering sensitive files, identifying SQL injection and XSS vulnerabilities with sqlmap, ghauri, dalfox, and xsstrike, and checking for CORS misconfigurations. The library also includes techniques for hidden directory discovery with dirsearch and ffuf, and for finding hidden parameters within JavaScript files. |
| 2023-07-26 2023 | Web Application Black-Box testing beginner API Sec Recon | Web Application Black-Box testing https://ift.tt/d1Mrqn4 |
| 2023-07-08 2023 | 10 tips for crushing bug bounties beginner 5 min read | Tips for bug bounty success, including actionable advice like starting immediately, targeting less competitive programs, leveraging existing skills while diversifying, mastering OWASP Top 10 basics, and prioritizing health. It also emphasizes community involvement, smart collaboration, utilizing resources like PentesterLab and "The Web Application Hacker's Handbook," embracing automation for efficiency, and maintaining persistence throughout the learning process. |
| 2023-06-17 2023 | The Complete Guide to Bug Bounty Hunting beginner 2 min read | Library of training materials covering bug bounty hunting essentials, including OWASP Top 10 vulnerabilities, Kali Linux tools like Nmap, SQLmap, and Metasploit for web application hacking, and techniques for finding and exploiting vulnerabilities in Android applications. |
| 2023-06-09 2023 | dwisiswant0/awesome-oneliner-bugbounty beginner 6 min read | Library of one-liner scripts for bug bounty hunting. This collection includes commands for discovering subdomains using tools like `subfinder`, `assetfinder`, and `amass`, then identifying vulnerable endpoints with techniques such as LFI, redirect, and XSS checks. It also features scripts for web scraping with `gau`, `gospider`, and `waybackurls`, and for network reconnaissance using Shodan searches and DNS queries. |
| 2023-06-08 2023 | kargisimos/offensive-bookmarks beginner 1 min read OSINT Recon | Collection of browser bookmarks for penetration testers and bug bounty hunters, featuring curated links for OSINT, cheat sheets across multiple operating systems and tools, malware development and analysis resources, shell collections, encoders, decoders, and obfuscation tools for various languages. It also includes sections on privilege escalation, password cracking, and practice labs, streamlining access to essential offensive security information. |
| 2023-05-09 2023 | How I Automate BugBounty Using Chatgpt intermediate AI | How I Automate BugBounty Using Chatgpt https://ift.tt/93SQsPD |
| 2023-05-04 2023 | Hacking Techniques and Intrusion Detection beginner 6 min read Recon | Library of materials covering software exploitation, debugging fundamentals, and intrusion detection. It details the use of debuggers like GDB and Immunity Debugger for vulnerability analysis, including a walkthrough of discovering a NULL pointer dereference in a C program by examining program execution and memory states. |
| 2023-04-02 2023 | $10.000 bounty for exposed .git to RCE news RCE | $10.000 bounty for exposed .git to RCE https://ift.tt/1AxW3QH |
| 2023-04-02 2023 | How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty intermediate SQLi | How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty https://ift.tt/8yQVgw5 |
| 2023-04-02 2023 | Top 25 IDOR Bug Bounty Reports intermediate IDOR | Top 25 IDOR Bug Bounty Reports https://ift.tt/HCA9b4O → corneacristian.medium.com |
| 2023-04-02 2023 | Mastering XSS: A Comprehensive Guide for Bug Bounty Hunters intermediate XSS | Mastering XSS: A Comprehensive Guide for Bug Bounty Hunters https://ift.tt/tFcafTi |