# Bug Hunter Handbook

## Bug Hunter Handbook

- [Introduction](https://gowthams.gitbook.io/bughunter-handbook/master.md)
- [Getting Started in InfoSec and Bug Bounties.](https://gowthams.gitbook.io/bughunter-handbook/getting-started-in-bug-bounties.md): This page contains blogs/ articles to help with getting started in  Information Security and Bug Bounties.
- [Presentations](https://gowthams.gitbook.io/bughunter-handbook/presentations.md): This Page contains various presentations delivered at various conferences.
- [Checklists / Guides](https://gowthams.gitbook.io/bughunter-handbook/checklists.md)
- [Useful Twitter Threads](https://gowthams.gitbook.io/bughunter-handbook/good-twitter-threads.md)
- [List of Vulnerabilities](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs.md)
- [Recon and OSINT](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint.md): Resources related to Recon and OSINT
- [Recon](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/recon.md)
- [Sensitive information using Github](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/sensitive-information-using-github.md)
- [Subdomain Enumeration](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/subdomain-enumeration.md)
- [Resolvers](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/subdomain-enumeration/resolvers.md)
- [Javascript Enumeration](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/untitled.md)
- [After Recon](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/after-recon.md)
- [Finding Information Using Public Resources](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/finding-information-using-public-resources.md)
- [OSINT](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/osint.md)
- [Cloud](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/cloud.md)
- [Wayback](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/wayback.md)
- [Parameter / Content Discovery](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/param-discovery.md)
- [Broken Link Highjacking](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/broken-link-highjacking.md)
- [Host Header](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/host-header.md)
- [Injection](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/sqli.md): References for Injection Attacks
- [Other Injection](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/sqli/untitled.md)
- [DNS Rebinding](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/dns-rebinding.md)
- [Cross Site Scripting (XSS)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/cross-site-scripting.md): References for Cross Site Scripting Attacks
- [Weaponizing XSS](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/cross-site-scripting/weaponizing-xss.md)
- [WAF Bypass](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/cross-site-scripting/waf-bypas.md)
- [Cross Origin Resource Sharing (CORS)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/cors.md): References for CORS
- [Local / Remote File Inclusion (LFI / RFI)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/lfi-rfi.md): References for LFI / RFI
- [Server Side Request Forgery (SSRF)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/ssrf.md): References for SSRF
- [Remote Code Execution (RCE)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/rce.md)
- [XML Entity Injecton (XXE)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/untitled.md)
- [Price Manipulation](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/price-manipulation.md)
- [Directory / Path Traversal](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/directory-path-traversal.md)
- [Cross Site Request Forgery (CSRF)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/csrf.md)
- [JSON CSRF](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/csrf/json-csrf.md)
- [Password Reset](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/password-reset.md)
- [Login Page Issues](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/login-page-issues.md)
- [Deserialization Attacks](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/untitled-1.md)
- [File Upload](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/file-upload.md)
- [Account Takeover](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/ato.md)
- [Insecure Direct Object References (IDOR)](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/insecure-direct-object-references-idor.md)
- [Open Redirect](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/open-redirect.md)
- [Business Logic Flaws](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/business-logic-flaws.md)
- [Rate Limit Bypass / 2FA / OTP Bypass](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/rate-limit-bypass.md)
- [Ruby on Rails](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/ruby-on-rails.md)
- [Mass Assginment](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/ruby-on-rails/mass-assginment.md)
- [S3 Bucket](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/s3-bucket.md)
- [Race Condition](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/race-condition.md)
- [CRLF](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/crlf.md)
- [SSTI](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/ssti.md)
- [Prototype Pollution](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/prototype-pollution.md)
- [Approach](https://gowthams.gitbook.io/bughunter-handbook/approach.md)
- [API Security](https://gowthams.gitbook.io/bughunter-handbook/api-security.md)
- [Mobile Security](https://gowthams.gitbook.io/bughunter-handbook/mobile-security.md)
- [Fuzzing / Wordlists](https://gowthams.gitbook.io/bughunter-handbook/fuzzing-wordlists.md)
- [BugBounty Short Write-ups](https://gowthams.gitbook.io/bughunter-handbook/bugbounty-short-write-ups.md)
- [Burp Suite Tips and Tricks](https://gowthams.gitbook.io/bughunter-handbook/burp-suite-tips-and-tricks.md)
- [HackerOne Reports](https://gowthams.gitbook.io/bughunter-handbook/hackerone-reports.md)
- [Response Manipulation](https://gowthams.gitbook.io/bughunter-handbook/response-manipulation.md)
- [Client Vs Server Side Vulnerabilities](https://gowthams.gitbook.io/bughunter-handbook/client-vs-server-side-vulnerabilities.md)
- [DevSecOps](https://gowthams.gitbook.io/bughunter-handbook/devsecops.md)
- [Containers](https://gowthams.gitbook.io/bughunter-handbook/containers.md)
- [Docker](https://gowthams.gitbook.io/bughunter-handbook/containers/docker.md)
- [Kubernetes](https://gowthams.gitbook.io/bughunter-handbook/containers/kubernetes.md)
- [Containers](https://gowthams.gitbook.io/bughunter-handbook/containers/containers.md)
- [AWS](https://gowthams.gitbook.io/bughunter-handbook/aws.md)
- [Azure](https://gowthams.gitbook.io/bughunter-handbook/azure.md)
- [Others](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities.md): Work In Progress !!!
- [Code Review](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/code-review.md)
- [Web Sockets](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/web-sockets.md)
- [Web Cache](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/web-cache.md)
- [HTTP Desync Attacks](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/http-desync-attacks.md)
- [Zone Transfer](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/zone-transfer.md)
- [CSP Bypass](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/csp-bypass.md)
- [Payment Bypasses](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/payment-bypasses.md)
- [Http Parameter Pollution](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/hpp.md)
- [Postmessage](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/postmessage.md)
- [Others](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/others.md)
- [GraphQL](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/graphql.md)
- [Unix / Linux](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/unix-linux.md)
- [Email Related](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/email-related.md)
- [Dependency confusion](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/dependency-confusion.md)
- [Nginx Misconfigs](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/nginx-misconfigs.md)
- [JIRA](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/jira.md)
- [OAUTH](https://gowthams.gitbook.io/bughunter-handbook/intresting-vulnerabilities/oauth.md)
- [Chaining of Bugs](https://gowthams.gitbook.io/bughunter-handbook/chaining-of-bugs.md)
- [Bug Bounty Automation](https://gowthams.gitbook.io/bughunter-handbook/automation.md)
- [Mindmaps](https://gowthams.gitbook.io/bughunter-handbook/mindmaps.md)
- [Oneliner Collections](https://gowthams.gitbook.io/bughunter-handbook/oneliners.md)
- [Red Teaming](https://gowthams.gitbook.io/bughunter-handbook/red-teaming.md)
- [Blue Teamining](https://gowthams.gitbook.io/bughunter-handbook/blue-teamining.md)
- [Recon One Liners](https://gowthams.gitbook.io/bughunter-handbook/recon-one-liners.md)
- [Misc](https://gowthams.gitbook.io/bughunter-handbook/misc.md)
- [Wordpress](https://gowthams.gitbook.io/bughunter-handbook/wordpress.md)
- [Fuzzing / FuFF](https://gowthams.gitbook.io/bughunter-handbook/fuzzing-fuff.md)
- [OWASP ZAP](https://gowthams.gitbook.io/bughunter-handbook/owasp-zap.md)
- [Bug List](https://gowthams.gitbook.io/bughunter-handbook/bug-list.md)
- [Setting up burp collaborator](https://gowthams.gitbook.io/bughunter-handbook/setting-up-burp-collaborator.md)
- [Admin Panel PwN](https://gowthams.gitbook.io/bughunter-handbook/admin-panel-pwn.md)
- [Credential Stuffing / Dump / HaveibeenPwned?](https://gowthams.gitbook.io/bughunter-handbook/credential-stuffing-dump-haveibeenpwned.md)
- [Tools Required](https://gowthams.gitbook.io/bughunter-handbook/tools-required.md)
- [Nuclei Template](https://gowthams.gitbook.io/bughunter-handbook/nuclei-template.md)
- [Other BugBounty Repos / Tips](https://gowthams.gitbook.io/bughunter-handbook/other-bugbounty-repos.md)
- [Interview](https://gowthams.gitbook.io/bughunter-handbook/interview.md)
- [Threat Modelling](https://gowthams.gitbook.io/bughunter-handbook/threat-modelling.md)
- [AppSec](https://gowthams.gitbook.io/bughunter-handbook/appsec.md)