Bug Hunter Handbook
⌘Ctrlk
Bug Hunter Handbook
  • Introduction
  • Getting Started in InfoSec and Bug Bounties.
  • Presentations
  • Checklists / Guides
  • Useful Twitter Threads
  • List of Vulnerabilities
    • Recon and OSINT
    • Host Header
    • Injection
    • DNS Rebinding
    • Cross Site Scripting (XSS)
    • Cross Origin Resource Sharing (CORS)
    • Local / Remote File Inclusion (LFI / RFI)
    • Server Side Request Forgery (SSRF)
    • Remote Code Execution (RCE)
    • XML Entity Injecton (XXE)
    • Price Manipulation
    • Directory / Path Traversal
    • Cross Site Request Forgery (CSRF)
    • Password Reset
    • Login Page Issues
    • Deserialization Attacks
    • File Upload
    • Account Takeover
    • Insecure Direct Object References (IDOR)
    • Open Redirect
    • Business Logic Flaws
    • Rate Limit Bypass / 2FA / OTP Bypass
    • Ruby on Rails
    • S3 Bucket
    • Race Condition
    • CRLF
    • SSTI
    • Prototype Pollution
  • Approach
  • API Security
  • Mobile Security
  • Fuzzing / Wordlists
  • BugBounty Short Write-ups
  • Burp Suite Tips and Tricks
  • HackerOne Reports
  • Response Manipulation
  • Client Vs Server Side Vulnerabilities
  • DevSecOps
  • Containers
  • AWS
  • Azure
  • Others
  • Chaining of Bugs
  • Bug Bounty Automation
  • Mindmaps
  • Oneliner Collections
  • Red Teaming
  • Blue Teamining
  • Recon One Liners
  • Misc
  • Wordpress
  • Fuzzing / FuFF
  • OWASP ZAP
  • Bug List
  • Setting up burp collaborator
  • Admin Panel PwN
  • Credential Stuffing / Dump / HaveibeenPwned?
  • Tools Required
  • Nuclei Template
  • Other BugBounty Repos / Tips
  • Interview
  • Threat Modelling
  • AppSec
Powered by GitBook
For the complete documentation index, see llms.txt. This page is also available as Markdown.
  1. List of Vulnerabilities

DNS Rebinding

LogoMy First SSRF Using DNS RebindingMarek Geleta1
https://twitter.com/fasthm00/status/1149370114086592513twitter.com
LogoAttacking Private Networks from the Internet with DNS RebindingMedium

tool - https://github.com/daeken/httprebind

https://rbnd.gl0.eurbnd.gl0.eu
LogoGitHub - nccgroup/singularity: A DNS rebinding attack framework.GitHub
  • Learn DNS here - https://www.youtube.com/watch?v=OYe1nri0zOA

  • https://labs.f-secure.com/blog/from-http-referer-to-aws-security-credentials/

  • DNS takeover - https://www.youtube.com/watch?v=C0LQJTXFosI

  • DNS Tunneling - https://blog.netspi.com/dns-tunneling-with-burp-collaborator/

  • https://blog.mindedsecurity.com/2021/02/journey-into-beauty-of-dnsrebinding.html

PreviousOther Injection
NextCross Site Scripting (XSS)

Last updated 5 years ago