Cyber security

All About Bug Bounty – A Detailed Resource On Vulnerabilities, Bypass Techniques, And Security Research

Diving into the world of bug bounty, this article serves as an essential toolkit for aspiring and seasoned security researchers alike.

It compiles a vast array of vulnerabilities, bypass techniques, and strategic insights gathered from diverse sources.

Whether you’re looking to enhance your hacking skills, contribute to cybersecurity, or simply explore the depths of bug bounty hunting, this guide offers a wealth of knowledge to navigate the intricate landscape of cybersecurity challenges.

These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too!

List Vulnerability

List Bypass

Checklist

CVEs

  • CVEs 2021
  • CVEs 2022 (SOON)
  • CVEs 2023 (SOON)

Miscellaneous

Technologies

Reconnaissance

To-Do-List

  • Tidy up the reconnaisance folder
  • Added more lesser known web attacks
  • Added CVEs folder
  • Writes multiple payload bypasses for each vulnerability
    • Payload XSS for each WAF (Cloudflare, Cloudfront, AWS, etc)
    • Payload SQL injection for each WAF (Cloudflare, Cloudfront)
Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

SECurityTr8Ker : SEC Cybersecurity Disclosure Monitor

SECurityTr8Ker is a Python application designed to monitor the U.S. Securities and Exchange Commission's (SEC)…

4 days ago

ripgrep : The Fast, Flexible Search Tool

ripgrep is a line-oriented search tool that recursively searches the current directory for a regex…

4 days ago

InfluxDB : The Open Source Leader In Time Series Data And Real-Time Analytics

InfluxDB is the leading open source time series database for metrics, events, and real-time analytics.…

4 days ago

Fuxploider : Automating File Upload Vulnerability Exploitation

Fuxploider is an open source penetration testing tool that automates the process of detecting and…

4 days ago

The Strength Of Signed App Control Policies

Before delving into the topic, let's first clarify the role of an Administrator within the…

7 days ago

Embassy : Revolutionizing Embedded Systems With Rust And Asynchronous Programming

Embassy is the next-generation framework for embedded applications. Write safe, correct and energy-efficient embedded code…

7 days ago