The Bug Hunter's Methodology (TBHM)

Welcome! This repo is a collection of

related to web application security assessments and more specifically towards bug hunting in bug bounties.

The current sections are divided as follows:

The goal of the project is to incorporate more up to date resources for bug hunters and web hackers to use during thier day-to-day work.

@jhaddix

History

Title	Conference	Version	Link
How to Shot Web	Defcon 23	1.0	Link
The Bug Hunter's Methodology	xxx	xxx	Link
The Bug Hunter's Methodology	xxx	xxx	Link
The Bug Hunter's Methodology	xxx	xxx	Link
The Bug Hunter's Methodology	xxx	xxx	Link

Name	Name	Last commit message	Last commit date
Latest commit jhaddix Add files via upload Aug 8, 2020 26a4935 · Aug 8, 2020 History 98 Commits
v4	v4	Update README.md	Jun 14, 2020
01_Philosophy.md	01_Philosophy.md	Update 01_Philosophy.md	May 15, 2017
02_Discovery.md	02_Discovery.md	Fixed Typo	Jun 30, 2020
03_Mapping.md	03_Mapping.md	Rename 03_Mapping.markdown to 03_Mapping.md	May 15, 2017
04_Authorization_and_Session.md	04_Authorization_and_Session.md	Rename 04_Authorization_and_Session.markdown to 04_Authorization_and_…	May 15, 2017
05_XSS.md	05_XSS.md	Update 05_XSS.md	Mar 30, 2018
06_SQLi.md	06_SQLi.md	Update 06_SQLi.md	Jan 10, 2018
07_File_Upload.md	07_File_Upload.md	Update 07_File_Upload.md	Oct 31, 2017
08_CSRF.md	08_CSRF.md	Update 08_CSRF.md	Jan 6, 2020
09_Privledge_Logic_Transport.md	09_Privledge_Logic_Transport.md	Rename 09_Privledge_Logic_Transport.markdown to 09_Privledge_Logic_Tr…	May 15, 2017
10_Mobile.md	10_Mobile.md	Rename 10_Mobile.markdown to 10_Mobile.md	May 15, 2017
11_Auxiliary_Info.md	11_Auxiliary_Info.md	Rename 11_Auxiliary_Info.markdown to 11_Auxiliary_Info.md	May 15, 2017
12_IDOR.markdown	12_IDOR.markdown	adding IDOR	Mar 14, 2016
How Do I shot Web-.pdf	How Do I shot Web-.pdf	ad pdf	Sep 5, 2015
Project (OD).xmind	Project (OD).xmind	Add files via upload	Aug 8, 2020
README.md	README.md	Update README.md	Jul 9, 2020