AllAboutBugBounty - All about bug bounty (bypasses, payloads, and etc)
All about bug bounty
These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too!
List Vulnerability
- Arbitrary File Upload
- Business Logic Errors
- CRLF Injection
- Cross Site Request Forgery (CSRF)
- Cross Site Scripting (XSS)
- Denial of Service (DoS)
- Exposed Source Code
- Host Header Injection
- Insecure Direct Object References (IDOR)
- Local File Inclusion (LFI)
- Mass Assignment
- NoSQL Injection
- OAuth Misconfiguration
- Open Redirect
- Remote File Inclusion (RFI)
- Server Side Request Forgery
- SQL Injection (SOON)
- Web Cache Deception
- Web Cache Poisoning
Checklist
- Forgot Password Functionality
- Register Functionality SOON!
List Bypass
Miscellaneous
- Account Takeover
- Broken Link Hijacking
- Default Credentials
- Email Spoofing
- JWT Vulnerabilities
- Tabnabbing
Technologies
- Apache (HTTP Server)
- Confluence
- Grafana
- HAProxy
- Jenkins
- Jira
- Joomla
- Laravel
- Moodle
- Nginx
- WordPress
- Zend
Reconnaissance
To-Do-List
- [ ] Tidy up the reconnaisance folder
- [x] Added CVEs folder
- [ ] Writes multiple payload bypasses for each vulnerability
- [x] Payload XSS for each WAF (Cloudflare, Cloudfront, AWS, etc)
- [ ] Payload SQL injection for each WAF (Cloudflare, Cloudfront)
热门帖子
热门github
1
2
4
The Python Risk Identification Tool for generative AI (PyRIT) is an open access automation framework to empower security professionals and machine learning engineers to proactively find risks in their generative AI systems.
(翻译：用于生成式 AI 的 Python 风险识别工具 (PyRIT) 是一个开放式访问自动化框架，使安全专业人员和机器学习工程师能够主动发现其生成式 AI 系统中的风险。)
5
7
8
9
Mamba is a new state space model architecture showing promising performance on information-dense data such as language modeling, where previous subquadratic models fall short of Transformers. It is based on the line of progress on structured state space models, with an efficient hardware-aware design and implementation in the spirit of FlashAttention.
(翻译：Mamba 是一种新的状态空间模型架构，在信息密集型数据（例如语言建模）上显示出良好的性能，而之前的二次模型在 Transformers 方面存在不足。它基于结构化状态空间模型的进展，并本着FlashAttention的精神进行高效的硬件感知设计和实现。)
10
11
13