https://github.com/jhaddix/tbhm

The Bug Hunters Methodology
https://github.com/jhaddix/tbhm

Last synced: 3 months ago
JSON representation

The Bug Hunters Methodology

• Host: GitHub
• URL: https://github.com/jhaddix/tbhm
• Owner: jhaddix
• Created: 2015-07-27T17:44:46.000Z (almost 9 years ago)
• Default Branch: master
• Last Pushed: 2023-08-01T18:22:10.000Z (11 months ago)
• Last Synced: 2024-01-22T01:25:02.196Z (5 months ago)
• Homepage:
• Size: 14.6 MB
• Stars: 3,671
• Watchers: 268
• Forks: 783
• Open Issues: 19
• Metadata Files:
  • Readme: README.md

Lists

• awesome-infosec - jhaddix - The Bug Hunters Methodology
• awesome-security-collection - **1636**星
• awesome-hacking-lists - tbhm - The Bug Hunters Methodology (Others (1002))
• awesome-hacking-lists - tbhm - The Bug Hunters Methodology (Others)
• awesome-hacking-lists - jhaddix/tbhm - The Bug Hunters Methodology (Others)
• awesome-stars - jhaddix/tbhm - `★3786` The Bug Hunters Methodology (Others)

README

        


# The Bug Hunter's Methodology (TBHM)

Welcome! This repo is a collection of 

 - tips  

 - tricks

 - tools

 - data analysis

 - and notes

related to web application security assessments and more specifically towards bug hunting in bug bounties. 

The current sections are divided as follows:

### Before You Get Hacking

* [Learning Resources](/Learning.md)

* [Content Creators and Influencers](/Content.md)

### Reconassiance

### Application Analysis

* [Mapping](/03_Mapping.md)

* [Authorization and Sessions](/04_Authorization_and_Session.md)

* Tactical fuzzing

  * [XSS](/05_XSS.md)

  * [SQLi](/06_SQLi.md)

  * [File Inclusion](/07_File_Upload.md)

  * [CSRF](/08_CSRF.md)

* [Privilege, Transport and Logic](/09_Privledge_Logic_Transport.md)

* Web services

* [Mobile vulnerabilities](/10_Mobile.md)

### Other

* [Auxiliary Information](/11_Auxiliary_Info.md)

The goal of the project is to incorporate more up to date resources for bug hunters and web hackers to use during thier day-to-day work. 

@jhaddix

##  History

|Title| Conference | Version| Link 

|--|--|--|--|

| How to Shot Web | Defcon 23 | 1.0 | Link |

| The Bug Hunter's Methodology | xxx | xxx | Link |

| The Bug Hunter's Methodology | xxx | xxx | Link |

| The Bug Hunter's Methodology | xxx | xxx | Link |

| The Bug Hunter's Methodology | xxx | xxx | Link |