🕵
🕵
🕵
🕵
HowToHunt
Search…
Account Takeover Methodology
Application Level DoS
Authentication Bypass
Broken-Link Hijacking
Broken Auth And Session Management
CSRF
Finding CVEs
CheckList
Web Page Source Code Review
EXIF Geo Data Not Stripped
File Upload Bypass
Find Origin IP
GraphQL
HTTP Desync Attack
Host-Header Attack
HTML-Injection
IDOR
JWT ATTACK
MFA Bypass
Misconfigurations
OAuth
Open Redirection
Parameter Pollution
Password Reset Functionality
Rate Limit
SQLi
SSRF
SSTI
Sign Up Functionality
Sensitive Info Leaks
Status Code Bypass
Subdomain Takeover
Tabnabbing
WAF Bypasses
Weak Password Policy
XXE
HowToHunt.md
Some Tutorials and Things to Do while Hunting Particular Vulnerability.
GitBook Link :- https://kathan19.gitbook.io/
GitHub Repo Link :- https://github.com/KathanP19/HowToHunt
- Go to Above GitBook link if you want to read and To Contribute go to Github and and make a Pull Request !!.
Note: You can help me complete this list by making Pull Request and please do mention your twitter handler at the end of the file.
All the credits to all the contributors, without you all it could have never been possible
If you want to know what's added every week then follow me on twitter https://twitter.com/KathanP19 I post what's updated every weekends.
Contributors ✨
Thanks goes to these wonderful people :
Last modified 1mo ago