Resources-for-Beginner-Bug-Bounty-Hunters/assets/vulns.md

Resources-for-Beginner-Bug-Bounty-Hunters

Vulnerabilities

Compact descriptions of common vulnerability types with links to useful resources.

Online Resources

• Owasp Top 10
• OWASP Testing Guide v4
• Bug Bounty Cheat Sheets - by EdOverflow

---

Cross-Site Scripting (XSS)

As we start to build this repository, we'll be adding more vulnerability types and resources for each one. XSS is a great place to start as it's one of the most popular and easiest vulnerabilities to find in a web application.

• Hacker101
• OWASP XSS
• A comprehensive tutorial on cross-site scripting
• Google Application Security (XSS Guide)
• What is PHP and why is XSS so common there? - by LiveOverflow

Cross-Site Request Forgery (CSRF)

• Cross-Site Request Forgery Attack - by PwnFunction

XML External Entities (XXE)

• XML External Entities ft. JohnHammond - by PwnFunction

Isecure Direct Object Reference (IDOR)

• Insecure Direct Object Reference Vulnerability - by PwnFunction
• Finding Your First Bug: Manual IDOR Hunting - by Insider PhD
• Burp Suite tutorial: IDOR vulnerability automation using Autorize and AutoRepeater (bug bounty) - by STÖK & Fisher

Open Redirect

• Open Redirect Vulnerability - by PwnFunction

HTTP Parameter Pollution

• HTTP Parameter Pollution Attacks - by PwnFunction

Logic Errors

• Finding Your First Bug: Business Logic Errors - by InsiderPhD

Remote Code Execution

• Finding Your First Bug: Goal Setting / Remote Code Execution (RCE) - by InsiderPhD

---

back to Intro Page