Bug Bounty Cheat Sheet

• Bug Bounty Platforms

• Books

• Special Tools

• Recon

• Practice Platforms

• XSS

• SQLI

• SSRF

• CRLF Injection || HTTP Response Splitting

• CSV Injection

• LFI

• XXE

• RCE

• Open Redirect

• Crypto

• Template Injection

• Content Injection

• XSLT Injection

• Found some juice ? Confused, how to write a good vulnerability report? Click here

Contributing

We welcome contributions from the public.

Using the issue tracker 💡

The issue tracker is the preferred channel for bug reports and features requests.

Issues and labels 🏷

Our bug tracker utilizes several labels to help organize and identify issues.

Guidelines for bug reports 🐛

Use the GitHub issue search — check if the issue has already been reported.

Style Guide

We like to keep our Markdown files as uniform as possible. So if you submit a PR make sure to follow this style guide (We will not be angry if you do not.)

• Cheat sheet titles should start with ##.
• Subheadings should be made bold. (**Subheading**)
• Add newlines after subheadings and code blocks.
• Code blocks should use three backticks. (```)
• Make sure to use syntax highlighting whenever possible.

Contributors

• EdOverflow
• GerbenJavado
• jon_bottarini
• sp1d3r
• yasinS
• neutrinoguy
• kuromatae
• Nu!!
• And many more ...