{"id":13844464,"url":"https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","last_synced_at":"2025-07-11T22:32:09.347Z","repository":{"id":162670777,"uuid":"342555452","full_name":"xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","owner":"xalgord","description":"A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.","archived":false,"fork":false,"pushed_at":"2024-09-20T17:53:27.000Z","size":294,"stargazers_count":1287,"open_issues_count":0,"forks_count":204,"subscribers_count":24,"default_branch":"main","last_synced_at":"2024-10-15T09:05:32.947Z","etag":null,"topics":["bug-bounty","bugbounty","bugbountytips","collection","ethical-hacking","hacking","owasp","owasp-top-10","resources","xalgord"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/xalgord.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-02-26T11:30:09.000Z","updated_at":"2024-10-14T14:38:49.000Z","dependencies_parsed_at":"2023-11-10T17:54:04.218Z","dependency_job_id":null,"html_url":"https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xalgord%2FMassive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xalgord%2FMassive-Web-Application-Penetration-Testing-Bug-Bounty-Notes/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xalgord%2FMassive-Web-Application-Penetration-Testing-Bug-Bounty-Notes/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xalgord%2FMassive-Web-Application-Penetration-Testing-Bug-Bounty-Notes/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/xalgord","download_url":"https://codeload.github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225763421,"owners_count":17520456,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bug-bounty","bugbounty","bugbountytips","collection","ethical-hacking","hacking","owasp","owasp-top-10","resources","xalgord"],"created_at":"2024-08-04T17:02:43.023Z","updated_at":"2024-11-21T16:31:33.463Z","avatar_url":"https://github.com/xalgord.png","language":null,"funding_links":[],"categories":["Others"],"sub_categories":[],"readme":"# Pentration Testing, Beginners To Expert!\n\nThis guide is designed for both beginners and experienced penetration testers. It covers all web application penetration testing aspects, including foundational concepts, setting up testing environments with tools like Burp Suite and bWAPP, and detailed methodologies for identifying and exploiting vulnerabilities, especially those listed in the OWASP Top 10. The guide also provides practical resources such as video tutorials and links to relevant tools, making it valuable for anyone looking to improve their web application security testing and bug bounty hunting skills.\n\n\u003cbr/\u003e\n\n\u003e **Note** - Some of the links may become unavailable (returning a 404 error) in the future. If you come across any broken links, please help us by reporting them in the issue section or making a PR. \n\n\u003cbr/\u003e\nContent List:\n\n- Phase 1 – [History](#phase-1--history)\n- Phase 2 – [Web and Server Technology](#phase-2--web-and-server-technology)\n- Phase 3 – [Setting up the lab with BurpSuite and bWAPP](#phase-3--setting-up-the-lab-with-burpsuite-and-bwapp)\n- Phase 4 – [Mapping the application and attack surface](#phase-4--mapping-the-application-and-attack-surface)\n- Phase 5 – [Understanding and exploiting OWASP top 10 vulnerabilities](#phase-5--understanding-and-exploiting-owasp-top-10-vulnerabilities)\n- Phase 6 – [Session management testing](#phase-6--session-management-testing)\n- Phase 7 – [Bypassing client-side controls](#phase-7--bypassing-client-side-controls)\n- Phase 8 – [Attacking authentication/login](#phase-8--attacking-authenticationlogin)\n- Phase 9 - [Attacking access controls (IDOR, Priv esc, hidden files and directories)](#phase-9---attacking-access-controls-idor-priv-esc-hidden-files-and-directories)\n- Phase 10 – [Attacking Input validations (All injections, XSS and mics)](#phase-10--attacking-input-validations-all-injections-xss-and-mics)\n- Phase 11 – [Generating and testing error codes](#phase-11--generating-and-testing-error-codes)\n- Phase 12 – [Weak cryptography testing](#phase-12--weak-cryptography-testing)\n- Phase 13 – [Business logic vulnerability](#phase-13--business-logic-vulnerability)\n\u003cbr\u003e\u003cbr\u003e\n## Web Application Penetration Testing\n## Phase 1 – History\n\nHistory of the Internet - https://www.youtube.com/watch?v=9hIQjrMHTv4 \n\u003cbr\u003e\u003cbr\u003e\n\n\n## Phase 2 – Web and Server Technology\n\nBasic concepts of web applications, how they work and the HTTP protocol - https://www.youtube.com/watch?v=RsQ1tFLwldY\u0026t=7s\n\n\nHTML basics part 1 - https://www.youtube.com/watch?v=p6fRBGI_BY0\n\nHTML basics part 2 - https://www.youtube.com/watch?v=Zs6lzuBVK2w\n\nDifference between static and dynamic website - https://www.youtube.com/watch?v=hlg6q6OFoxQ\n\nHTTP protocol Understanding - https://www.youtube.com/watch?v=JFZMyhRTVt0\n\nParts of HTTP Request -https://www.youtube.com/watch?v=pHFWGN-upGM\n\nParts of HTTP Response - https://www.youtube.com/watch?v=c9sMNc2PrMU\n\nVarious HTTP Methods - https://www.youtube.com/watch?v=PO7D20HsFsY\n\nUnderstanding URLS - https://www.youtube.com/watch?v=5Jr-_Za5yQM\n\nIntro to REST - https://www.youtube.com/watch?v=YCcAE2SCQ6k\n\n\nHTTP Request \u0026 Response Headers - https://www.youtube.com/watch?v=vAuZwirKjWs\n\nWhat is a cookie - https://www.youtube.com/watch?v=I01XMRo2ESg\n\nHTTP Status codes - https://www.youtube.com/watch?v=VLH3FMQ5BIQ\n\nHTTP Proxy - https://www.youtube.com/watch?v=qU0PVSJCKcs\n\nAuthentication with HTTP - https://www.youtube.com/watch?v=GxiFXUFKo1M\n\nHTTP basic and digest authentication - https://www.youtube.com/watch?v=GOnhCbDhMzk\n\nWhat is “Server-Side” - https://www.youtube.com/watch?v=JnCLmLO9LhA\n\nServer and client side with example - https://www.youtube.com/watch?v=DcBB2Fp8WNI\n\nWhat is a session - https://www.youtube.com/watch?v=WV4DJ6b0jhg\u0026t=202s\n\nIntroduction to UTF-8 and Unicode - https://www.youtube.com/watch?v=sqPTR_v4qFA\n\nURL encoding - https://www.youtube.com/watch?v=Z3udiqgW1VA\n\nHTML encoding - https://www.youtube.com/watch?v=IiAfCLWpgII\u0026t=109s\n\nBase64 encoding - https://www.youtube.com/watch?v=8qkxeZmKmOY\n\nHex encoding \u0026 ASCII - [https://www.youtube.com/watch?v=WW2SaCMnHdU](https://www.youtube.com/watch?v=8ue8febDDKU)\n\u003cbr\u003e\u003cbr\u003e\n\n\n## Phase 3 – Setting up the lab with BurpSuite and bWAPP\n\n\n### MANISH AGRAWAL\n\n\nSetup lab with bWAPP - https://www.youtube.com/watch?v=dwtUn3giwTk\u0026index=1\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\n\nSet up Burp Suite - https://www.youtube.com/watch?v=hQsT4rSa_v0\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\u0026index=2\n\nConfigure Firefox and add certificate - https://www.youtube.com/watch?v=hfsdJ69GSV4\u0026index=3\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\n\nMapping and scoping website - https://www.youtube.com/watch?v=H-_iVteMDRo\u0026index=4\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\n\nSpidering - https://www.youtube.com/watch?v=97uMUQGIe14\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\u0026index=5\n\nActive and passive scanning - https://www.youtube.com/watch?v=1Mjom6AcFyU\u0026index=6\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\n\nScanner options and demo - https://www.youtube.com/watch?v=gANi4Kt7-ek\u0026index=7\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\n\nIntroduction to password security - https://www.youtube.com/watch?v=FwcUhcLO9iM\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\u0026index=8\n\nIntruder - https://www.youtube.com/watch?v=wtMg9oEMTa8\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\u0026index=9\n\nIntruder attack types - https://www.youtube.com/watch?v=N5ndYPwddkQ\u0026index=10\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\n\nPayload settings - https://www.youtube.com/watch?v=5GpdlbtL-1Q\u0026index=11\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\n\nIntruder settings - https://www.youtube.com/watch?v=B_Mu7jmOYnU\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\u0026index=12\n\n\n\u003cbr\u003e\u003cbr\u003e\n### ÆTHER SECURITY LAB\n\n\n\nNo.1 Penetration testing tool - https://www.youtube.com/watch?v=AVzC7ETqpDo\u0026list=PLq9n8iqQJFDrwFe9AEDBlR1uSHEN7egQA\u0026index=1\n\nEnvironment Setup - https://www.youtube.com/watch?v=yqnUOdr0eVk\u0026index=2\u0026list=PLq9n8iqQJFDrwFe9AEDBlR1uSHEN7egQA\n\nGeneral concept - https://www.youtube.com/watch?v=udl4oqr_ylM\u0026list=PLq9n8iqQJFDrwFe9AEDBlR1uSHEN7egQA\u0026index=3\n\nProxy module - https://www.youtube.com/watch?v=PDTwYFkjQBE\u0026list=PLq9n8iqQJFDrwFe9AEDBlR1uSHEN7egQA\u0026index=4\n\nRepeater module - https://www.youtube.com/watch?v=9Zh_7s5csCc\u0026list=PLq9n8iqQJFDrwFe9AEDBlR1uSHEN7egQA\u0026index=5\n\nTarget and spider module - https://www.youtube.com/watch?v=dCKPZUSOlr8\u0026list=PLq9n8iqQJFDrwFe9AEDBlR1uSHEN7egQA\u0026index=6\n\nSequencer and scanner module - https://www.youtube.com/watch?v=G-v581pXerE\u0026list=PLq9n8iqQJFDrwFe9AEDBlR1uSHEN7egQA\u0026index=7\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 4 – Mapping the application and attack surface\n\n\n\nSpidering - https://www.youtube.com/watch?v=97uMUQGIe14\u0026list=PLv95pq8fEyuivHeZB2jeC435tU3_1YGzV\u0026index=5\n\nMapping application using robots.txt - https://www.youtube.com/watch?v=akuzgZ75zrk\n\nDiscover hidden contents using dirbuster - https://www.youtube.com/watch?v=--nu9Jq07gA\n\nDirbuster in detail - https://www.youtube.com/watch?v=2tOQC68hAcQ 1\n\nDiscover hidden directories and files with intruder - https://www.youtube.com/watch?v=4Fz9mJeMNkI\n\nDirectory bruteforcing 1 - https://www.youtube.com/watch?v=ch2onB_LFoI\n\nDirectory bruteforcing 2 - https://www.youtube.com/watch?v=ASMW_oLbyIg\n\nIdentify application entry points - https://www.youtube.com/watch?v=IgJWPZ2OKO8\u0026t=34s\n\nIdentify application entry points - https://www.owasp.org/index.php/Identify_application_entry_points_(OTG-INFO-006)\n\nIdentify client and server technology - https://www.youtube.com/watch?v=B8jN_iWjtyM\n\nIdentify server technology using banner grabbing (telnet) - https://www.youtube.com/watch?v=O67M-U2UOAg\n\nIdentify server technology using httprecon - https://www.youtube.com/watch?v=xBBHtS-dwsM\n\nPentesting with Google dorks Introduction - https://www.youtube.com/watch?v=NmdrKFwAw9U\n\nFingerprinting web server - https://www.youtube.com/watch?v=tw2VdG0t5kc\u0026list=PLxLRoXCDIalcRS5Nb1I_HM_OzS10E6lqp\u0026index=10\n\nUse Nmap for fingerprinting web server - https://www.youtube.com/watch?v=VQV-y_-AN80\n\nReview webs servers metafiles for information leakage - https://www.youtube.com/watch?v=sds3Zotf_ZY\n\nEnumerate applications on web server - https://www.youtube.com/watch?v=lfhvvTLN60E\n\nIdentify application entry points - https://www.youtube.com/watch?v=97uMUQGIe14\u0026list=PLDeogY2Qr-tGR2NL2X1AR5Zz9t1iaWwlM\n\nMap execution path through application - https://www.youtube.com/watch?v=0I0NPiyo9UI\n\nFingerprint web application frameworks - https://www.youtube.com/watch?v=ASzG0kBoE4c\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 5 – Understanding and exploiting OWASP top 10 vulnerabilities\n\n\n\nA closer look at all owasp top 10 vulnerabilities - https://www.youtube.com/watch?v=avFR_Af0KGk\n\n### IBM\n\nInjection - https://www.youtube.com/watch?v=02mLrFVzIYU\u0026index=1\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\n\nBroken authentication and session management - https://www.youtube.com/watch?v=iX49fqZ8HGA\u0026index=2\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\n\nCross-site scripting - https://www.youtube.com/watch?v=x6I5fCupLLU\u0026index=3\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\n\nInsecure direct object reference - https://www.youtube.com/watch?v=-iCyp9Qz3CI\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\u0026index=4\n\nSecurity misconfiguration - https://www.youtube.com/watch?v=cIplXL8idyo\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\u0026index=5\n\nSensitive data exposure - https://www.youtube.com/watch?v=rYlzTQlF8Ws\u0026index=6\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\n\nMissing functional level access controls - https://www.youtube.com/watch?v=VMv_gyCNGpk\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\u0026index=7\n\nCross-site request forgery - https://www.youtube.com/watch?v=_xSFm3KGxh0\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\u0026index=8\n\nUsing components with known vulnerabilities - https://www.youtube.com/watch?v=bhJmVBJ-F-4\u0026index=9\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\n\nUnvalidated redirects and forwards - https://www.youtube.com/watch?v=L6bYKiLtSL8\u0026index=10\u0026list=PLoyY7ZjHtUUVLs2fy-ctzZDSPpawuQ28d\n\n\n\u003cbr\u003e\u003cbr\u003e\n### F5 CENTRAL\n\n\nInjection - https://www.youtube.com/watch?v=rWHvp7rUka8\u0026index=1\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\nBroken authentication and session management - https://www.youtube.com/watch?v=mruO75ONWy8\u0026index=2\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\nInsecure deserialisation - https://www.youtube.com/watch?v=nkTBwbnfesQ\u0026index=8\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\nSensitive data exposure - https://www.youtube.com/watch?v=2RKbacrkUBU\u0026index=3\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\nBroken access control - https://www.youtube.com/watch?v=P38at6Tp8Ms\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\u0026index=5\n\nInsufficient logging and monitoring - https://www.youtube.com/watch?v=IFF3tkUOF5E\u0026index=10\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\nXML external entities - https://www.youtube.com/watch?v=g2ey7ry8_CQ\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\u0026index=4\n\nUsing components with known vulnerabilities - https://www.youtube.com/watch?v=IGsNYVDKRV0\u0026index=9\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\nCross-site scripting - https://www.youtube.com/watch?v=IuzU4y-UjLw\u0026index=7\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\nSecurity misconfiguration - https://www.youtube.com/watch?v=JuGSUMtKTPU\u0026index=6\u0026list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD\n\n\n\u003cbr\u003e\u003cbr\u003e\n### LUKE BRINER\n\n\n\nInjection explained - https://www.youtube.com/watch?v=1qMggPJpRXM\u0026index=1\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\n\nBroken authentication and session management - https://www.youtube.com/watch?v=fKnG15BL4AY\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\u0026index=2\n\nCross-site scripting - https://www.youtube.com/watch?v=ksM-xXeDUNs\u0026index=3\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\n\nInsecure direct object reference - https://www.youtube.com/watch?v=ZodA76-CB10\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\u0026index=4\n\nSecurity misconfiguration - https://www.youtube.com/watch?v=DfFPHKPCofY\u0026index=5\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\n\nSensitive data exposure - https://www.youtube.com/watch?v=Z7hafbGDVEE\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\u0026index=6\n\nMissing functional level access control - https://www.youtube.com/watch?v=RGN3w831Elo\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\u0026index=7\n\nCross-site request forgery - https://www.youtube.com/watch?v=XRW_US5BCxk\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\u0026index=8\n\nComponents with known vulnerabilities - https://www.youtube.com/watch?v=pbvDW9pJdng\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\u0026index=9\n\nUnvalidated redirects and forwards - https://www.youtube.com/watch?v=bHTglpgC5Qg\u0026list=PLpNYlUeSK_rkrrBox-xvSkm5lgaDqKa0X\u0026index=10\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 6 – Session management testing\n\n\n\nBypass authentication using cookie manipulation - https://www.youtube.com/watch?v=mEbmturLljU\n\nCookie Security Via httponly and secure Flag - OWASP - https://www.youtube.com/watch?v=3aKA4RkAg78\n\nPenetration testing Cookies basic - https://www.youtube.com/watch?v=_P7KN8T1boc\n\nSession fixation 1 - https://www.youtube.com/watch?v=ucmgeHKtxaI\n\nSession fixation 2 - https://www.youtube.com/watch?v=0Tu1qxysWOk\n\nSession fixation 3 - https://www.youtube.com/watch?v=jxwgpWvRUSo\n\nSession fixation 4 - https://www.youtube.com/watch?v=eUbtW0Z0W1g\n\nCSRF - Cross site request forgery 1 - https://www.youtube.com/watch?v=m0EHlfTgGUU\n\nCSRF - Cross site request forgery 2 - https://www.youtube.com/watch?v=H3iu0_ltcv4\n\nCSRF - Cross site request forgery 3 - https://www.youtube.com/watch?v=1NO4I28J-0s\n\nCSRF - Cross site request forgery 4 - https://www.youtube.com/watch?v=XdEJEUJ0Fr8\n\nCSRF - Cross site request forgery 5 - https://www.youtube.com/watch?v=TwG0Rd0hr18\n\nSession puzzling 1 - https://www.youtube.com/watch?v=YEOvmhTb8xA\n\nAdmin bypass using session hijacking - https://www.youtube.com/watch?v=1wp1o-1TfAc\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 7 – Bypassing client-side controls\n\n\n\nWhat is hidden forms in HTML - https://www.youtube.com/watch?v=orUoGsgaYAE\n\nBypassing hidden form fields using tamper data - https://www.youtube.com/watch?v=NXkGX2sPw7I\n\nBypassing hidden form fields using Burp Suite (Purchase application) - https://www.youtube.com/watch?v=xahvJyUFTfM\n\nChanging price on eCommerce website using parameter tampering - https://www.youtube.com/watch?v=A-ccNpP06Zg\n\nUnderstanding cookie in detail - https://www.youtube.com/watch?v=_P7KN8T1boc\u0026list=PLWPirh4EWFpESKWJmrgQwmsnTrL_K93Wi\u0026index=18\n\nCookie tampering with tamper data- https://www.youtube.com/watch?v=NgKXm0lBecc\n\nCookie tamper part 2 - https://www.youtube.com/watch?v=dTCt_I2DWgo\n\nUnderstanding referer header in depth using Cisco product - https://www.youtube.com/watch?v=GkQnBa3C7WI\u0026t=35s\n\nIntroduction to ASP.NET viewstate - https://www.youtube.com/watch?v=L3p6Uw6SSXs\n\nASP.NET viewstate in depth - https://www.youtube.com/watch?v=Fn_08JLsrmY\n\nAnalyse sensitive data in ASP.NET viewstate - https://msdn.microsoft.com/en-us/library/ms972427.aspx?f=255\u0026MSPPError=-2147217396\n\nCross-origin-resource-sharing explanation with example - https://www.youtube.com/watch?v=Ka8vG5miErk\n\nCORS demo 1 - https://www.youtube.com/watch?v=wR8pjTWaEbs\n\nCORS demo 2 - https://www.youtube.com/watch?v=lg31RYYG-T4\n\nSecurity headers - https://www.youtube.com/watch?v=TNlcoYLIGFk\n\nSecurity headers 2 - https://www.youtube.com/watch?v=ZZUvmVkkKu4\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 8 – Attacking authentication/login\n\n\n\nAttacking login panel with bad password - Guess username password for the website and try different combinations\n\nBrute-force login panel - https://www.youtube.com/watch?v=25cazx5D_vw\n\nUsername enumeration - https://www.youtube.com/watch?v=WCO7LnSlskE\n\nUsername enumeration with bruteforce password attack - https://www.youtube.com/watch?v=zf3-pYJU1c4\n\nAuthentication over insecure HTTP protocol - https://www.youtube.com/watch?v=ueSG7TUqoxk\n\nAuthentication over insecure HTTP protocol - https://www.youtube.com/watch?v=WQe36pZ3mA\n\nForgot password vulnerability - case 1 - https://www.youtube.com/watch?v=FEUidWWnZwU\n\nForgot password vulnerability - case 2 - https://www.youtube.com/watch?v=j7-8YyYdWL4\n\nLogin page autocomplete feature enabled - https://www.youtube.com/watch?v=XNjUfwDmHGc\u0026t=33s\n\nTesting for weak password policy - https://www.owasp.org/index.php/Testing_for_Weak_password_policy(OTG-AUTHN-007)\n\nInsecure distribution of credentials - When you register in any website or you request for a password reset using forgot password feature, if the website sends your username and \npassword over the email in cleartext without sending the password reset link, then it is a vulnerability.\n\nTest for credentials transportation using SSL/TLS certificate - https://www.youtube.com/watch?v=21_IYz4npRs\n\nBasics of MySQL - https://www.youtube.com/watch?v=yPu6qV5byu4\n\nTesting browser cache - https://www.youtube.com/watch?v=2T_Xz3Humdc\n\nBypassing login panel -case 1 - https://www.youtube.com/watch?v=TSqXkkOt6oM\n\nBypass login panel - case 2 - https://www.youtube.com/watch?v=J6v_W-LFK1c\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 9 - Attacking access controls (IDOR, Priv esc, hidden files and directories)\n\n### Completely unprotected functionalities\n\nFinding admin panel - https://www.youtube.com/watch?v=r1k2lgvK3s0\n\nFinding admin panel and hidden files and directories - https://www.youtube.com/watch?v=Z0VAPbATy1A\n\nFinding hidden webpages with dirbusater - https://www.youtube.com/watch?v=--nu9Jq07gA\u0026t=5s\n\n\n\u003cbr\u003e\u003cbr\u003e\n### Insecure direct object reference\n\nIDOR case 1 - https://www.youtube.com/watch?v=gci4R9Vkulc\n\nIDOR case 2 - https://www.youtube.com/watch?v=4DTULwuLFS0\n\nIDOR case 3 (zomato) - https://www.youtube.com/watch?v=tCJBLG5Mayo\n\n\n\u003cbr\u003e\u003cbr\u003e\n### Privilege escalation\n\nWhat is privilege escalation - https://www.youtube.com/watch?v=80RzLSrczmc\n\nPrivilege escalation - Hackme bank - case 1 - https://www.youtube.com/watch?v=g3lv__87cWM\n\nPrivilege escalation - case 2 - https://www.youtube.com/watch?v=-i4O_hjc87Y\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 10 – Attacking Input validations (All injections, XSS and mics)\n\n### HTTP verb tampering\n\nIntroduction HTTP verb tampering - https://www.youtube.com/watch?v=Wl0PrIeAnhs\n\nHTTP verb tampering demo - https://www.youtube.com/watch?v=bZlkuiUkQzE\n\n\n\u003cbr\u003e\u003cbr\u003e\n### HTTP parameter pollution\n\nIntroduction HTTP parameter pollution - https://www.youtube.com/watch?v=Tosp-JyWVS4\n\nHTTP parameter pollution demo 1 - https://www.youtube.com/watch?v=QVZBl8yxVX0\u0026t=11s\n\nHTTP parameter pollution demo 2 - https://www.youtube.com/watch?v=YRjxdw5BAM0\n\nHTTP parameter pollution demo 3 - https://www.youtube.com/watch?v=kIVefiDrWUw\n\n\n\u003cbr\u003e\u003cbr\u003e\n### XSS - Cross site scripting\n\nIntroduction to XSS - https://www.youtube.com/watch?v=gkMl1suyj3M\n\nWhat is XSS - https://www.youtube.com/watch?v=cbmBDiR6WaY\n\nReflected XSS demo - https://www.youtube.com/watch?v=r79ozjCL7DA\n\nXSS attack method using burpsuite - https://www.youtube.com/watch?v=OLKBZNw3OjQ\n\nXSS filter bypass with Xenotix - https://www.youtube.com/watch?v=loZSdedJnqc\n\nReflected XSS filter bypass 1 - https://www.youtube.com/watch?v=m5rlLgGrOVA\n\nReflected XSS filter bypass 2 - https://www.youtube.com/watch?v=LDiXveqQ0gg\n\nReflected XSS filter bypass 3 - https://www.youtube.com/watch?v=hb_qENFUdOk\n\nReflected XSS filter bypass 4 - https://www.youtube.com/watch?v=Fg1qqkedGUk\n\nReflected XSS filter bypass 5 - https://www.youtube.com/watch?v=NImym71f3Bc\n\nReflected XSS filter bypass 6 - https://www.youtube.com/watch?v=9eGzAym2a5Q\n\nReflected XSS filter bypass 7 - https://www.youtube.com/watch?v=ObfEI84_MtM\n\nReflected XSS filter bypass 8 - https://www.youtube.com/watch?v=2c9xMe3VZ9Q\n\nReflected XSS filter bypass 9 - https://www.youtube.com/watch?v=-48zknvo7LM\n\nIntroduction to Stored XSS - https://www.youtube.com/watch?v=SHmQ3sQFeLE\n\nStored XSS 1 - https://www.youtube.com/watch?v=oHIl_pCahsQ\n\nStored XSS 2 - https://www.youtube.com/watch?v=dBTuWzX8hd0\n\nStored XSS 3 - https://www.youtube.com/watch?v=PFG0lkMeYDc\n\nStored XSS 4 - https://www.youtube.com/watch?v=YPUBFklUWLc\n\nStored XSS 5 - https://www.youtube.com/watch?v=x9Zx44EV-Og\n\n\n\u003cbr\u003e\u003cbr\u003e\n### SQL injection\n\n\n\nPart 1 - Install SQLi lab - https://www.youtube.com/watch?v=NJ9AA1_t1Ic\u0026index=23\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 2 - SQL lab series - https://www.youtube.com/watch?v=TA2h_kUqfhU\u0026index=22\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 3 - SQL lab series - https://www.youtube.com/watch?v=N0zAChmZIZU\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=21\n\nPart 4 - SQL lab series - https://www.youtube.com/watch?v=6pVxm5mWBVU\u0026index=20\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 5 - SQL lab series - https://www.youtube.com/watch?v=0tyerVP9R98\u0026index=19\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 6 - Double query injection - https://www.youtube.com/watch?v=zaRlcPbfX4M\u0026index=18\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 7 - Double query injection cont… - https://www.youtube.com/watch?v=9utdAPxmvaI\u0026index=17\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 8 - Blind injection boolean based - https://www.youtube.com/watch?v=u7Z7AIR6cMI\u0026index=16\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 9 - Blind injection time based - https://www.youtube.com/watch?v=gzU1YBu_838\u0026index=15\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 10 - Dumping DB using outfile - https://www.youtube.com/watch?v=ADW844OA6io\u0026index=14\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 11 - Post parameter injection error based - https://www.youtube.com/watch?v=6sQ23tqiTXY\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=13\n\nPart 12 - POST parameter injection double query based - https://www.youtube.com/watch?v=tjFXWQY4LuA\u0026index=12\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 13 - POST parameter injection blind boolean and time based - https://www.youtube.com/watch?v=411G-4nH5jE\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=10\n\nPart 14 - Post parameter injection in UPDATE query - https://www.youtube.com/watch?v=2FgLcPuU7Vw\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=11\n\nPart 15 - Injection in insert query - https://www.youtube.com/watch?v=ZJiPsWxXYZs\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=9\n\nPart 16 - Cookie based injection - https://www.youtube.com/watch?v=-A3vVqfP8pA\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=8\n\nPart 17 - Second order injection -https://www.youtube.com/watch?v=e9pbC5BxiAE\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=7\n\nPart 18 - Bypassing blacklist filters - 1 - https://www.youtube.com/watch?v=5P-knuYoDdw\u0026index=6\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 19 - Bypassing blacklist filters - 2 - https://www.youtube.com/watch?v=45BjuQFt55Y\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=5\n\nPart 20 - Bypassing blacklist filters - 3 - https://www.youtube.com/watch?v=c-Pjb_zLpH0\u0026index=4\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\n\nPart 21 - Bypassing WAF - https://www.youtube.com/watch?v=uRDuCXFpHXc\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=2\n\nPart 22 - Bypassing WAF - Impedance mismatch - https://www.youtube.com/watch?v=ygVUebdv_Ws\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=3\n\nPart 23 - Bypassing addslashes - charset mismatch - https://www.youtube.com/watch?v=du-jkS6-sbo\u0026list=PLkiAz1NPnw8qEgzS7cgVMKavvOAdogsro\u0026index=1\n\n\n\u003cbr\u003e\u003cbr\u003e\n### NoSQL injection\n\nIntroduction to NoSQL injection - https://www.youtube.com/watch?v=h0h37-Dwd_A\n\nIntroduction to SQL vs NoSQL - Difference between MySQL and MongoDB with tutorial - https://www.youtube.com/watch?v=QwevGzVu_zk\n\nAbusing NoSQL databases - https://www.youtube.com/watch?v=lcO1BTNh8r8\n\nMaking cry - attacking NoSQL for pentesters - https://www.youtube.com/watch?v=NgsesuLpyOg\n\n\n\u003cbr\u003e\u003cbr\u003e\n### Xpath and XML injection\n\nIntroduction to Xpath injection - https://www.youtube.com/watch?v=2_UyM6Ea0Yk\u0026t=3102s\n\nIntroduction to XML injection - https://www.youtube.com/watch?v=9ZokuRHo-eY\n\nPractical 1 - bWAPP - https://www.youtube.com/watch?v=6tV8EuaHI9M\n\nPractical 2 - Mutillidae - https://www.youtube.com/watch?v=fV0qsqcScI4\n\nPractical 3 - webgoat - https://www.youtube.com/watch?v=5ZDSPVp1TpM\n\nHack admin panel using Xpath injection - https://www.youtube.com/watch?v=vvlyYlXuVxI\n\nXXE demo - https://www.youtube.com/watch?v=3B8QhyrEXlU\n\nXXE demo 2 - https://www.youtube.com/watch?v=UQjxvEwyUUw\n\nXXE demo 3 - https://www.youtube.com/watch?v=JI0daBHq6fA\n\n\n\u003cbr\u003e\u003cbr\u003e\n### LDAP injection\n\nIntroduction and practical 1 - https://www.youtube.com/watch?v=-TXFlg7S9ks\n\nPractical 2 - https://www.youtube.com/watch?v=wtahzm_R8e4\n\n\n\u003cbr\u003e\u003cbr\u003e\n### OS command injection\n\nOS command injection in bWAPP - https://www.youtube.com/watch?v=qLIkGJrMY9k\n\nbWAAP- OS command injection with Commiux (All levels) - https://www.youtube.com/watch?v=5-1QLbVa8YE\n\n\n\u003cbr\u003e\u003cbr\u003e\n### Local file inclusion\n\nDetailed introduction - https://www.youtube.com/watch?v=kcojXEwolIs\n\nLFI demo 1 - https://www.youtube.com/watch?v=54hSHpVoz7A\n\nLFI demo 2 - https://www.youtube.com/watch?v=qPq9hIVtitI\n\n\n\u003cbr\u003e\u003cbr\u003e\n### Remote file inclusion\n\nDetailed introduction - https://www.youtube.com/watch?v=MZjORTEwpaw\n\nRFI demo 1 - https://www.youtube.com/watch?v=gWt9A6eOkq0\n\nRFI introduction and demo 2 - https://www.youtube.com/watch?v=htTEfokaKsM\n\n\n\u003cbr\u003e\u003cbr\u003e\n### HTTP splitting/smuggling\n\nDetailed introduction - https://www.youtube.com/watch?v=bVaZWHrfiPw\n\nDemo 1 - https://www.youtube.com/watch?v=mOf4H1aLiiE\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 11 – Generating and testing error codes\n\n\n\nGenerating normal error codes by visiting files that may not exist on the server - for example visit chintan.php or chintan.aspx file on any website and it may redirect you to 404.php or 404.aspx or their customer error page. Check if an error page is generated by default web server or application framework or a custom page is displayed which does not 405.display any sensitive information. Use BurpSuite fuzzing techniques to generate stack trace error codes - \n\nhttps://www.youtube.com/watch?v=LDF6OkcvBzM\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 12 – Weak cryptography testing\n\n\n\nSSL/TLS weak configuration explained - https://www.youtube.com/watch?v=Rp3iZUvXWlM\n\nTesting weak SSL/TLS ciphers - https://www.youtube.com/watch?v=slbwCMHqCkc\n\nTest SSL/TLS security with Qualys guard - https://www.youtube.com/watch?v=Na8KxqmETnw\n\nSensitive information sent via unencrypted channels - https://www.youtube.com/watch?v=21_IYz4npRs\n\n\n\u003cbr\u003e\u003cbr\u003e\n## Phase 13 – Business logic vulnerability\n\n\n\n\nWhat is a business logic flaw - https://www.youtube.com/watch?v=ICbvQzva6lE\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\n\nThe Difficulties Finding Business Logic Vulnerabilities with Traditional Security Tools - https://www.youtube.com/watch?v=JTMg0bhkUbo\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=2\n\nHow To Identify Business Logic Flaws - https://www.youtube.com/watch?v=FJcgfLM4SAY\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=3\n\nBusiness Logic Flaws: Attacker Mindset - https://www.youtube.com/watch?v=Svxh9KSTL3Y\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=4\n\nBusiness Logic Flaws: Dos Attack On Resource - https://www.youtube.com/watch?v=4S6HWzhmXQk\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=5\n\nBusiness Logic Flaws: Abuse Cases: Information Disclosure - https://www.youtube.com/watch?v=HrHdUEUwMHk\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=6\n\nBusiness Logic Flaws: Abuse Cases: iPod Repairman Dupes Apple - https://www.youtube.com/watch?v=8yB_ApVsdhA\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=7\n\nBusiness Logic Flaws: Abuse Cases: Online Auction - https://www.youtube.com/watch?v=oa_UICCqfbY\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=8\n\nBusiness Logic Flaws: How To Navigate Code Using ShiftLeft Ocular - https://www.youtube.com/watch?v=hz7IZu6H6oE\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=9\n\nBusiness Logic Security Checks: Data Privacy Compliance - https://www.youtube.com/watch?v=qX2fyniKUIQ\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=10\n\nBusiness Logic Security Checks: Encryption Compliance - https://www.youtube.com/watch?v=V8zphJbltDY\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=11\n\nBusiness Logic Security: Enforcement Checks - https://www.youtube.com/watch?v=5e7qgY_L3UQ\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=12\n\nBusiness Logic Exploits: SQL Injection - https://www.youtube.com/watch?v=hcIysfhA9AA\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=13\n\nBusiness Logic Exploits: Security Misconfiguration - https://www.youtube.com/watch?v=ppLBtCQcYRk\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=15\n\nBusiness Logic Exploits: Data Leakage - https://www.youtube.com/watch?v=qe0bEvguvbs\u0026list=PLWoDr1kTbIxKZe_JeTDIcD2I7Uy1pLIFI\u0026index=16\n\nDemo 1 - https://www.youtube.com/watch?v=yV7O-QRyOao\n\nDemo 2 - https://www.youtube.com/watch?v=mzjTG7pKmQI\n\nDemo 3 - https://www.youtube.com/watch?v=A8V_58QZPMs\n\nDemo 4 - https://www.youtube.com/watch?v=1pvrEKAFJyk\n\nDemo 5 - https://hackerone.com/reports/145745\n\nDemo 6 - https://hackerone.com/reports/430854\n\n\n\n# ENJOY \u0026 HAPPY LEARNING! ♥\n\nFollow me on linkedin [@xalgord](https://www.linkedin.com/in/xalgord/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fxalgord%2FMassive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fxalgord%2FMassive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fxalgord%2FMassive-Web-Application-Penetration-Testing-Bug-Bounty-Notes/lists"}