Resources-for-Beginner-Bug-.../assets/vulns.md

# Resources-for-Beginner-Bug-Bounty-Hunters

## Vulnerabilities
Compact descriptions of common vulnerability types with links to useful resources. 
### Online Resources
- [Owasp Top 10](https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project)
- [OWASP Testing Guide v4](https://www.owasp.org/index.php/OWASP_Testing_Project)
- [Bug Bounty Cheat Sheets](https://github.com/EdOverflow/bugbounty-cheatsheet) - by EdOverflow
---
## Cross-Site Scripting (XSS)
As we start to build this repository, we'll be adding more vulnerability types and resources for each one. XSS is a great place to start as it's one of the most popular and easiest vulnerabilities to find in a web application.

- [Hacker101](https://www.hacker101.com/sessions/xss)
- [OWASP XSS](https://www.owasp.org/index.php/Cross-site_Scripting_(XSS))
- [A comprehensive tutorial on cross-site scripting](https://excess-xss.com)
- [Google Application Security (XSS Guide)](https://www.google.com/intl/am_AD/about/appsecurity/learning/xss/)
 - [What is PHP and why is XSS so common there?](https://www.youtube.com/watch?v=Q2mGcbkX550) - by LiveOverflow

## Cross-Site Request Forgery (CSRF)
- [Cross-Site Request Forgery Attack](https://www.youtube.com/watch?v=eWEgUcHPle0) - by PwnFunction

## XML External Entities (XXE)
- [XML External Entities ft. JohnHammond](https://www.youtube.com/watch?v=gjm6VHZa_8s) - by PwnFunction
## Isecure Direct Object Reference (IDOR)
- [Insecure Direct Object Reference Vulnerability](https://www.youtube.com/watch?v=rloqMGcPMkI) - by PwnFunction
- [Finding Your First Bug: Manual IDOR Hunting](https://www.youtube.com/watch?v=gINAtzdccts) - by Insider PhD
- [Burp Suite tutorial: IDOR vulnerability automation using Autorize and AutoRepeater (bug bounty)](https://www.youtube.com/watch?v=3K1-a7dnA60) - by STÖK & Fisher
## Open Redirect
- [Open Redirect Vulnerability](https://www.youtube.com/watch?v=4Jk_I-cw4WE) - by PwnFunction
## HTTP Parameter Pollution
- [HTTP Parameter Pollution Attacks](https://www.youtube.com/watch?v=QVZBl8yxVX0) - by PwnFunction
## Logic Errors
- [Finding Your First Bug: Business Logic Errors](https://www.youtube.com/watch?v=RobCqW2KwGs) - by InsiderPhD
---
back to [Intro Page](/README.md)
ordered and linked Resources 2019-12-12 09:50:59 +00:00			`# Resources-for-Beginner-Bug-Bounty-Hunters`

			`## Vulnerabilities`
			`Compact descriptions of common vulnerability types with links to useful resources.`
added a link back to README 2019-12-12 13:00:28 +00:00			`### Online Resources`
			`- [Owasp Top 10](https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project)`
			`- [OWASP Testing Guide v4](https://www.owasp.org/index.php/OWASP_Testing_Project)`
added resources & tools 2019-12-17 13:24:38 +00:00			`- [Bug Bounty Cheat Sheets](https://github.com/EdOverflow/bugbounty-cheatsheet) - by EdOverflow`
added a link back to README 2019-12-12 13:00:28 +00:00			`---`
added resources & tools 2019-12-17 13:24:38 +00:00			`## Cross-Site Scripting (XSS)`
ordered and linked Resources 2019-12-12 09:50:59 +00:00			`As we start to build this repository, we'll be adding more vulnerability types and resources for each one. XSS is a great place to start as it's one of the most popular and easiest vulnerabilities to find in a web application.`

			`- [Hacker101](https://www.hacker101.com/sessions/xss)`
			`- [OWASP XSS](https://www.owasp.org/index.php/Cross-site_Scripting_(XSS))`
			`- [A comprehensive tutorial on cross-site scripting](https://excess-xss.com)`
organised and linked everything 2019-12-12 10:07:53 +00:00			`- [Google Application Security (XSS Guide)](https://www.google.com/intl/am_AD/about/appsecurity/learning/xss/)`
added resources & tools 2019-12-17 13:24:38 +00:00			`- [What is PHP and why is XSS so common there?](https://www.youtube.com/watch?v=Q2mGcbkX550) - by LiveOverflow`
organised and linked everything 2019-12-12 10:07:53 +00:00
added resources & tools 2019-12-17 13:24:38 +00:00			`## Cross-Site Request Forgery (CSRF)`
			`- [Cross-Site Request Forgery Attack](https://www.youtube.com/watch?v=eWEgUcHPle0) - by PwnFunction`

			`## XML External Entities (XXE)`
			`- [XML External Entities ft. JohnHammond](https://www.youtube.com/watch?v=gjm6VHZa_8s) - by PwnFunction`
			`## Isecure Direct Object Reference (IDOR)`
			`- [Insecure Direct Object Reference Vulnerability](https://www.youtube.com/watch?v=rloqMGcPMkI) - by PwnFunction`
			`- [Finding Your First Bug: Manual IDOR Hunting](https://www.youtube.com/watch?v=gINAtzdccts) - by Insider PhD`
			`- [Burp Suite tutorial: IDOR vulnerability automation using Autorize and AutoRepeater (bug bounty)](https://www.youtube.com/watch?v=3K1-a7dnA60) - by STÖK & Fisher`
			`## Open Redirect`
			`- [Open Redirect Vulnerability](https://www.youtube.com/watch?v=4Jk_I-cw4WE) - by PwnFunction`
			`## HTTP Parameter Pollution`
			`- [HTTP Parameter Pollution Attacks](https://www.youtube.com/watch?v=QVZBl8yxVX0) - by PwnFunction`
			`## Logic Errors`
			`- [Finding Your First Bug: Business Logic Errors](https://www.youtube.com/watch?v=RobCqW2KwGs) - by InsiderPhD`
organised and linked everything 2019-12-12 10:07:53 +00:00			`---`
added a link back to README 2019-12-12 13:00:28 +00:00			`back to [Intro Page](/README.md)`