https://github.com/mark-zh/BugBountyTips

记录一些国外漏洞赏金猎人的挖洞技巧和一些有意思的东西
https://github.com/mark-zh/BugBountyTips

Last synced: 21 days ago
JSON representation

记录一些国外漏洞赏金猎人的挖洞技巧和一些有意思的东西

• Host: GitHub
• URL: https://github.com/mark-zh/BugBountyTips
• Owner: mark-zh
• Created: 2019-11-04T03:22:52.000Z (about 5 years ago)
• Default Branch: master
• Last Pushed: 2019-12-04T06:46:04.000Z (about 5 years ago)
• Last Synced: 2024-08-05T17:27:59.921Z (4 months ago)
• Language: JavaScript
• Size: 988 KB
• Stars: 32
• Watchers: 3
• Forks: 7
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - mark-zh/BugBountyTips - 记录一些国外漏洞赏金猎人的挖洞技巧和一些有意思的东西 (JavaScript)

README

        
# BugBountyTips

记录一些国外漏洞赏金猎人的挖洞技巧和一些有意思的东西

### 微信公众号

![](we-public.jpg)

### One Line

- [One line `crt.sh` subdomain discover code](信息收集/one-line.md)

### Google Dork Tips

- [Google Dork Tips](信息收集/Google-Dork.md)

### 信息收集

- [基于浏览器的子域名爆破](信息收集/run.js)

### Bypass

- [Bypass WAF by Shortening IP Addresses](bypass/bypass-ip.md)

### 挖洞技巧

- [从失效的链接中挖掘存储xss，利用js拓展攻击面](find-xss/xss-tips.md)