Welcome to the bug bounty knowledge base. Built around The Bug Hunter's Methodology (TBHM).

• 01 - Philosophy & Mindset
• 02 - Discovery & Recon
• 03 - Mapping the Attack Surface
• 04 - Authorization & Session Management
• 05 - Cross-Site Scripting (XSS)
• 06 - SQL Injection
• 07 - File Upload Vulnerabilities
• 08 - CSRF
• 09 - Privilege Escalation, Logic & Transport
• 10 - Mobile Testing
• 11 - Auxiliary Info & Tools
• 12 - IDOR
• Fast Testing Checklist

• TBHM Index
• Fast Checklist
• Recon & Discovery
• XSS
• SQLi
• Auth Bypass
• IDOR

• Methodology Index
• Philosophy & Principles
• Recon & Attack Surface
• Feature Testing Checklist
• XSS | CSRF | IDOR | SSRF
• Open Redirects | SQLi | CORS
• Auth & Session | Logic Bugs
• Bug Chaining | Reporting

• All Articles