Bug Hunter Handbook
Ctrlk
  • Introduction
  • Getting Started in InfoSec and Bug Bounties.
  • Presentations
  • Checklists / Guides
  • Useful Twitter Threads
  • List of Vulnerabilities
  • Approach
  • API Security
  • Mobile Security
  • Fuzzing / Wordlists
  • BugBounty Short Write-ups
  • Burp Suite Tips and Tricks
  • HackerOne Reports
  • Response Manipulation
  • Client Vs Server Side Vulnerabilities
  • DevSecOps
  • Containers
  • AWS
  • Azure
  • Others
  • Chaining of Bugs
  • Bug Bounty Automation
  • Mindmaps
  • Oneliner Collections
  • Red Teaming
  • Blue Teamining
  • Recon One Liners
  • Misc
  • Wordpress
  • Fuzzing / FuFF
  • OWASP ZAP
  • Bug List
  • Setting up burp collaborator
  • Admin Panel PwN
  • Credential Stuffing / Dump / HaveibeenPwned?
  • Tools Required
  • Nuclei Template
  • Other BugBounty Repos / Tips
  • Interview
  • Threat Modelling
  • AppSec
Powered by GitBook
On this page

Was this helpful?

Threat Modelling

  • https://owasp.org/www-community/Application_Threat_Modeling

  • https://github.com/hysnsec/awesome-threat-modelling

  • https://twitter.com/shehackspurple/status/1281651816237690881

  • https://twitter.com/ZephrFish/status/1272634494235926530

  • https://martinfowler.com/articles/agile-threat-modelling.html#GrowYourPractise

  • https://medium.com/sagefuturemakers/real-world-threat-modelling-fb14ef767c49

  • https://dev.to/azure/pushing-left-like-a-boss-part-6-threat-modelling-1j5g

  • https://www.youtube.com/watch?v=0t0kD68U7rc

  • https://twitter.com/sharathkramadas/status/1053069538885922817

  • https://twitter.com/orchestronIO

  • https://www.youtube.com/c/kpcerc

  • https://dev.to/shehackspurple/ama-where-can-we-learn-threat-modelling-30cg

Good Link - https://docs.google.com/document/d/10KxP5yuDmem53KhV7UBBCRXviZfH1iQS7nr3NSL3OFg/edit#

  • https://github.com/izar/pytm

  • https://github.com/secmerc/materialize-threats

  • https://github.blog/2020-09-02-how-we-threat-model/

PreviousInterviewNextAppSec

Last updated 1 year ago

Was this helpful?