Introduction

OSINT / Recon

API

Cross Site Request Forgery (CSRF)

Server Side Request Forgery (SSRF)

Sensitive Information Disclosure

Cross Site Scripting (XSS)

CRLF

Remote Code Execution (RCE)

Email Related

File Upload

Open Redirect

IDOR

Injection

XXE

Local / Remote File Inclusion

Authentication / Authorization

Account Takeover

Application Login

Clickjacking

Parameter Pollution

Fuzzing

Application Logic Bypasses

Bypasses

Mobile

Password Reset

Server Side Template Injection

Tips from @EdOverflow

Tips From @intigriti

Hackpack From @yeswehack

Tips from @YogoshaOfficial

Tips from @Jhaddix

Tips from Ben

Tips from Other Sources

Tips from Blog posts / other hunters

Others

Bugbounty Related Websites / Blogs

Twitter Threads

Docker and k8s

Tweets Collection by @Pentesterland

Windows

Linux

Burp suite

Scope Based Recon Tips