{"id":13609582,"url":"https://github.com/imran-parray/Mind-Maps","last_synced_at":"2025-04-12T20:32:17.227Z","repository":{"id":37626097,"uuid":"289009346","full_name":"imran-parray/Mind-Maps","owner":"imran-parray","description":"Mind-Maps of Several Things","archived":false,"fork":false,"pushed_at":"2023-06-29T16:43:43.000Z","size":31541,"stargazers_count":2531,"open_issues_count":1,"forks_count":539,"subscribers_count":72,"default_branch":"master","last_synced_at":"2025-04-06T11:07:05.372Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/imran-parray.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"Security Assesment - SOPAS/assessment-mindset.png","support":null,"governance":null}},"created_at":"2020-08-20T13:09:13.000Z","updated_at":"2025-04-06T04:02:49.000Z","dependencies_parsed_at":"2022-09-13T16:21:54.508Z","dependency_job_id":"63d5850d-d206-4c32-be18-e30b09d78bb7","html_url":"https://github.com/imran-parray/Mind-Maps","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/imran-parray%2FMind-Maps","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/imran-parray%2FMind-Maps/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/imran-parray%2FMind-Maps/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/imran-parray%2FMind-Maps/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/imran-parray","download_url":"https://codeload.github.com/imran-parray/Mind-Maps/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248629895,"owners_count":21136337,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T19:01:36.194Z","updated_at":"2025-04-12T20:32:12.214Z","avatar_url":"https://github.com/imran-parray.png","language":null,"funding_links":[],"categories":["Others","Others (1002)"],"sub_categories":[],"readme":"# MindMaps 🗺️\n\n\u003e This repository stores and houses various Mindmaps for bug bounty Hunters🧑‍🦰, pentesters🧑‍🦰 and offensive(🔴)/defensive(🔵) security Professionals🫂 provided by me as well as contributed by the community🧑🏻‍🤝‍🧑🏽. Your contributions and suggestions are welcomed.\n\n| Name                                            | Link                                                         | Type   | Description                                                  | Author                                              |\n| ----------------------------------------------- | ------------------------------------------------------------ | ------ | ------------------------------------------------------------ | --------------------------------------------------- |\n| Bug Hunters Methodology                         | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Bug%20Hunters%20Methodology%20v4/MindMap.png) | **🔴**    | This Mindmap explains how to test for bugs on Bug bounty programs | [Jhaddix](https://twitter.com/jhaddix)              |\n| Fiding Server side issues                       | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Finding%20Server%20Side%20Issues%20-%20imran%20parray/Finding%20Server%20Side%20Issues.jpg) | **🔴**  | This mind-map explains how to look for server side issues on your bug-bounty/pentest targets | [Imran parray](https://twitter.com/imranparray101)  |\n| Javascript Recon                                | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Js%20Recon%20-%20Imran%20Parray/Javascript-file-methodology.png) | **🔴**  | How to perform recon on JavaScript files                     | [Imran parray](https://twitter.com/imranparray101)  |\n| My Recon                                        | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Recon%20-%20Imran%20parray/My-recon.png) | **🔴**  | This mind-map explains how to look for various server side and client side bugs on Bug bounty programs | [Imran parray](https://twitter.com/imranparray101)  |\n| Testing 2FA                                     | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Testing%202FA-hackerscrolls/Testing%202FA.jpeg) | **🔴**  | How to test 2FA for Bugs                                     | [hackerscrolls](https://twitter.com/hackerscrolls)  |\n| Testing 2FA [2]                                 | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Testing%202FA%20(2)%20-%20hackerscroll/Testing%202FA.jpeg) | **🔴**  | How to test 2FA for Bugs                                     | [hackerscrolls](https://twitter.com/hackerscrolls)  |\n| 2FA Bypass Techniques                            | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/2FA%20Bypass%20Techniques%20-%20Harsh%20Bothra/2FA%20Bypass%20Techniques.png) | **🔴**  | 2FA Bypass Techniques                                    | [Harsh Bothra](https://twitter.com/harshbothra_)  |\n| Android Attacker Vectors                        | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Android%20Attacker%20Vector%20-%20hackerscroll/Android%20Attacker%20Vector.png) | **🔴**  | Detailed Mindmap on How to find and exploit Android bugs.    | [hackerscrolls](https://twitter.com/hackerscrolls)  |\n| Testing oAuth for Vulnerabilities               | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Testing%20OAuth%20-%20hackerscroll/Testing%20oAuth.jpeg) | **🔴**  | How to test Oauth for Bugs                                   | [hackerscrolls](https://twitter.com/hackerscrolls)  |\n| Security Assesment Mindmap                      | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Security%20Assesment%20-%20SOPAS/assessment-mindset.png) | **🔴**  | General security Assessment Mind-map   | [Sopas](https://twitter.com/dsopas)                 |\n| Red Teaming Mind Map from The Hacker Playbook 3 | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Red%20Teaming%20Mind%20Map%20from%20The%20Hacker%20Playbook%203/blog_hackerplaybook_mindmap.png) | **🔴**  | Mind-map containing several techniques and approaches used by Red team members | [Marcon Lencini](https://twitter.com/lancinimarco)  |\n| SSRF MindMap                                    | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/SSRF%20-%20Hackerscroll/ssrf.jpeg) | **🔴**  | How to test SSRF for Bugs                                    | [hackerscrolls](https://twitter.com/hackerscrolls)  |\n| Code Review Mindmap                             | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Code%20review%20-%20amanhardikar/CodeReview.png) | **🔴**🔵 | Mindmap containing several techniques and approaches that can be used during code reviews. | [www.amanhardikar.com](http://www.amanhardikar.com) |\n| Android Application Penetration Testing Mindmap| [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Android%20Mindmap%20-%20Harsh%20Bothra/AndroidMindmap.jpeg) | **🔴** | A simple mind-map which explains various test cases around Android Application Penetration Testing | [Harsh Bothra](https://twitter.com/harshbothra_) |\n| Cookie Based Authentication Vulnerabilities | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Cookie%20Based%20Authentication%20Vulnerabilities%20-%20Harsh%20Bothra/Cookie_Based_Authentication_Vulnerabilities.png) | **🔴** | a comprehensive Mind-map which includes various techniques to test Cookie based authentication mechanism. | [Harsh Bothra](https://twitter.com/harshbothra_) |\n| Tesing JIRA for CVE's                       | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Tesing%20JIRA%20for%20CVE's%20-%20Harsh%20Bothra/JIRA_CVEs.png) | **🔴** | Detailed Mind-map on How to find and exploit JIRA CVE's. | [Harsh Bothra](https://twitter.com/harshbothra_) |\n| Scope Based Testing                         | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Scope%20Based%20Testing%20-%20Harsh%20Bothra/Scope_Based_Recon.png) | **🔴** | This Mind-map explains how to test for bugs based on the scope of your target. | [Harsh Bothra](https://twitter.com/harshbothra_) |\n| OAuth 2.0 Threat Model Pentesting Checklist| [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Oauth2%20Pentest%20Checklist%20-%20BinaryBrotherh1/oauth.png) | **🔴** | The following checklist represents a simplified visual alternative to IETF OAuth 2.0 Security Best Current Practice publication combined with various other public resources we found usefull.| [Binary Brotherhood](https://twitter.com/BinaryBrotherh1) |\n|Bug Bounty Platforms  |[🔗](https://www.mindmeister.com/1578309575/bug-bounty-platforms)| 🔴 | list of bug bounty platform available  | [fujie gu](https://www.mindmeister.com/users/channel/51127258)  |\n|Web App Pentest|[🔗](https://www.mindmeister.com/1748098748/web-app-pentest?fullscreen=1)|🔴|Web application Pentest Mindmap|[Ding Jayway](https://www.mindmeister.com/users/channel/60235712)|\n|Web App Pentest|[🔗](https://www.mindmeister.com/1470766611/web-app-pentest?fullscreen=1)|🔴|This mind-map has the list of bugs and the corresponding tools and techniques used to find those bugs|[Ninad Mathpati](https://www.mindmeister.com/users/channel/45787993)|\n|Mobile Security Mindmap|[🔗](https://raw.githubusercontent.com/imran-parray/Mind-Maps/master/Mobile%20App%20Security%20-%20Aman%20Hardikar/map.png)|🔴|a comprehensive Mind-map which includes various techniques to test Mobile Application for security issues|[Aman Hardikar](https://twitter.com/AmanHardikar)|\n|Web Security Field Mindmap|[🔗](https://www.mindmeister.com/1746180947/web-vulnerability-by-joas-antonio?fullscreen=1)|🔴🔵|This mindmap is an combination of Web Attacks, AppSec and Bug Bounty stuff|[jois](https://www.mindmeister.com/users/channel/36439824)|\n|Security Consulting \u0026 Implementation|[🔗](https://www.mindmeister.com/988579189/security-consulting-implementation?fullscreen=1)|🔵|Security Consulting \u0026 Implementation mindmap|[Lawrence Pingree](https://www.mindmeister.com/users/channel/1154930)|\n|Information Security Technologies \u0026 Markets|[🔗](https://www.mindmeister.com/783360255/information-security-technologies-markets-by-lawrence-pingree?fullscreen=1)|🔴🔵|This Mindmap is an combination of Information Security Technologies \u0026 Markets|[ovens ffdf](https://www.mindmeister.com/users/channel/16669742)|\n|Information Security Technologies \u0026 Markets|[🔗](https://www.mindmeister.com/333578609/information-security-technologies-markets)|🔴🔵|This mindmap contains different Information Security Technologies \u0026 Markets|[John Fortner](https://www.mindmeister.com/users/channel/4563052)|\n|Nmap Scans Mindmap|[🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Nmap%20scans%20-%20OnlyHacker/mindmap.jpg)|🔴🔵|This mindmap show how different type of scans can be performed via Nmap Scanner|[Only Hacker](https://onlyhacker.com)|\n|Cross Site Request Frogery Mindmap|[🔗](https://raw.githubusercontent.com/imran-parray/Mind-Maps/master/XSRF%20-%20Trust%20Foundry/CSRF-CheatSheet-v2.3.1.png)|🔴🔵|This mindmap show how different type of security tests can be performed while testing CSRF|[alexlauerman](https://twitter.com/alexlauerman)|\n|Access Control Vulnerabilities| [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Access%20Control%20Vulnerabilities%20-%20Pratik%20Gaikwad/Access-Control-vaulnerabilites.png) | **🔴**  | List of Techniques that can be use to test access control models of an Application| [Pratik Gaikwad](https://twitter.com/X0rby7e)  |\n|CISO MindMap 2021| [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/CISO%20MindMap%202021%20-%20Rafeeq%20Rahman/CISO_Job_MindMap_Rafeeq_Rehman_v_2021.png) | **🔵**  | is the latest and updated CISO MindMap for 2021 with a number of updates and new recommendations for 2021-22| [Rafeeq Rehman](https://rafeeqrehman.com/author/boota135/)  |\n| Common Vulnerabilites on Forgot Password Functionality | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Common%20Vulnerabilites%20on%20Forgot%20Password%20Functionality%20-%20%20Harsh%20Bothra/Common%20Vulnerabilities%20on%20Forget%20Password%20Functionality.pdf) | **🔴**  | List of Test cases that can be perform on an Forgot password functionalities within the web apps| [Harsh Bothra](https://twitter.com/harshbothra_)  |\n| Common XML Attacks  | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Common%20XML%20Attacks%20-%20Harsh%20Bothra/XML%20Attacks%20New.pdf) | **🔴**  | In this Mindmap Harsh Bothra Tired to list all the attacks that can be performed on an XML endpoints/services   | [Harsh Bothra](https://twitter.com/harshbothra_)  |\n| Copy of Vulnerability Checklist for SAML  | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/2FA%20Bypass%20Techniques%20-%20Harsh%20Bothra/2FA%20Bypass%20Techniques.png) | **🔴**  | List of all the Vulnerability that can be tested on SAML Endpoints/Services    | [Harsh Bothra](https://twitter.com/harshbothra_)  |\n| Exploting Grafana  | [🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Exploting%20Grafana%20-%20daffainfo/grafana.png) | **🔴**  | Possible test cases to Exploit Publicly Avilable Grafa Instance    | [Muhammad Daffa](https://twitter.com/daffainfo)  |\n| FILE READ vulnerabilities  | [🔗](https://raw.githubusercontent.com/imran-parray/Mind-Maps/master/File%20Read%20Vulnerabilites%20-%20Lukasz%20Miku%C5%82a/FRV.jpeg) | **🔴**  | Practical strategies for exploiting FILE READ vulnerabilities | [Lukasz Mikuła](https://twitter.com/0xluk3)  |\n|The Cyber Guy - Recon|[🔗](https://raw.githubusercontent.com/imran-parray/Mind-Maps/master/The%20Cyber%20Guy%20-%20Recon%20Mindmap/theCyberGuy_Recon_V1.0.png)|🔴|in this mindmap the CyberGuy shares his Recon Methodology|[theCyberGuy0](https://twitter.com/theCyberGuy0)|\n|Penetration Testing Certifications|[🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Penetration%20Testing%20Certification%20-%20Tahar/mindmap.jpeg)|🔴🔵|in this mindmap Tahar Tries to uncover the list of Certification in the field of Penetration testing|[MrTaharAmine](https://twitter.com/MrTaharAmine)|\n|Linux Privilege Escalation |[🔗](https://github.com/imran-parray/Mind-Maps/blob/master/Linux%20Privilege%20Escalation%20-%20Mindmap/Linux_Previlege_Escalation.png)|🔴|this mindmap shows several linux privilege escalation Techniques|[Source](https://twitter.com/hackinarticles/status/1464075216993206274?s=28)|\n\n---\n\nSpecial Thanks to all the authors for publishing these mindmaps 🥳🥳🥳\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fimran-parray%2FMind-Maps","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fimran-parray%2FMind-Maps","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fimran-parray%2FMind-Maps/lists"}