EdOverflow/bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

6,553

stars

209

commits

Sep 14, 2023

updated

bugbounty

infosec

payloads

security

README

Bug Bounty Cheat Sheet

📚 Reference	🔎 Vulnerabilities
Bug Bounty Platforms	XSS
Books	SQLi
Special Tools	SSRF
Recon	CRLF Injection
Practice Platforms	CSV Injection
Bug Bounty Tips	LFI
	XXE
	RCE
	Open Redirect
	Crypto
	Template Injection
	Content Injection
	XSLT Injection

Contributing

We welcome contributions from the public.

Using the issue tracker 💡

The issue tracker is the preferred channel for bug reports and features requests.

Issues and labels 🏷

Our bug tracker utilizes several labels to help organize and identify issues.

Guidelines for bug reports 🐛

Use the GitHub issue search — check if the issue has already been reported.

Style Guide

We like to keep our Markdown files as uniform as possible. So if you submit a PR, make sure to follow this style guide (we will not be angry if you do not).

Cheat sheet titles should start with ##.
Subheadings should be made bold. (**Subheading**)
Add newlines after subheadings and code blocks.
Code blocks should use three backticks. (```)
Make sure to use syntax highlighting whenever possible.

Contributors

129 commits

22 commits

16 commits

8 commits

Similar repos

swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

80,786

shared topics

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

12,952

shared topics

trickest/wordlists

Real-world infosec wordlists, updated regularly

1,793

shared topics

edoardottt/awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability…

11,105

shared topics

trickest/cve

Gather and update all available and newest CVEs with their PoC.

8,058

shared topics

B3nac/Android-Reports-and-Resources

A big list of Android Hackerone disclosed reports and other resources.

1,710

shared topics

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set…

8,085

shared topics

coreb1t/awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

4,370

EdOverflow/bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

6,553

stars

209

commits

Sep 14, 2023

updated

bugbounty

infosec

payloads

security

README

Bug Bounty Cheat Sheet

📚 Reference	🔎 Vulnerabilities
Bug Bounty Platforms	XSS
Books	SQLi
Special Tools	SSRF
Recon	CRLF Injection
Practice Platforms	CSV Injection
Bug Bounty Tips	LFI
	XXE
	RCE
	Open Redirect
	Crypto
	Template Injection
	Content Injection
	XSLT Injection

Contributing

We welcome contributions from the public.

Using the issue tracker 💡

The issue tracker is the preferred channel for bug reports and features requests.

Issues and labels 🏷

Our bug tracker utilizes several labels to help organize and identify issues.

Guidelines for bug reports 🐛

Use the GitHub issue search — check if the issue has already been reported.

Style Guide

We like to keep our Markdown files as uniform as possible. So if you submit a PR, make sure to follow this style guide (we will not be angry if you do not).