Bug bounty Tips

BugBounty platforms List: https://medium.com/@loyalonlytoday/bugbounty-platforms-list-ed3a5af3a8a2?source=rss------bug_bounty-5

Automating the CORS Vulnerability Scan: https://angixblack.medium.com/automating-the-cors-vulnerability-scan-66d57752cc36?source=rss------bug_bounty-5

Live Bug Bounty & Penetration Testing on Real Websites: Step-by-Step Guide (Part 1): https://medium.com/@shaikhminhaz1975/live-bug-bounty-penetration-testing-on-real-websites-step-by-step-guide-part-1-971ccc9b9587?source=rss------bug_bounty-5

How i got 100$ bounty: https://medium.com/@mukkumukku110/how-i-got-100-bounty-b3dd58e82e00?source=rss------bug_bounty-5

Hunting for Corporate Accounts: Exploiting IDOR and Parameter Pollution in Web Applications: https://medium.com/@tusharpuri6/hunting-for-corporate-accounts-exploiting-idor-and-parameter-pollution-in-web-applications-1792294e0c48?source=rss------bug_bounty-5

Subdomain Takeovers for Beginners: https://medium.com/@hichamalmakroudi/subdomain-takeovers-for-beginners-a51ed74db543?source=rss------bug_bounty-5

XSS — Cross Site Scripting: https://medium.com/@codingboltacademy/xss-cross-site-scripting-65e1981817df?source=rss------bug_bounty-5

😈 [ Scott Sutherland @_nullbind ] [BLOG] Hijacking SQL Server Credentials using Agent Jobs for Domain Privilege Escalation 🔗 https://www.netspi.com/blog/technical-blog/network-pentesting/hijacking-sql-server-credentials-with-agent-jobs-for-domain-privilege-escalation/ 🐥 [ tweet ]

Xss lab: https://brutelogic.com.br/gym.php https://brutelogic.com.br/gym.php?p=gitbook 30 level

Bash challenge: Cmdchallenge.com

Password: @redbluehit

Guide to Using Nuclei: https://medium.com/@learntheshell/guide-to-using-nuclei-9c37869be30e?source=rss------bug_bounty-5

NUCLEI101 FOR BUG BOUNTY CHEATSHEET Sun, 18 Jun 2023 17:07:46 GMT https://medium.com/p/3eaf3c35b39

7 free online #OSINT Tools GHUNT - Google account info Sherlock - nickname enumeration Holehe - search accounts by email Ignorant - search accounts by phone Whois domain lookup WhatsApp profile info HudsonRock - email leaks lookup osint.rocks Tip by twitter.com/0xtechrock @OsintGit