bb-resouces
bb-resouces copied to clipboard
Published
20 hours ago •
Voorivex
Voorivex
Bug Bounty Resources
Some resources for learning and updating your methodology.
Write-ups
| Link | Tags |
|---|---|
| https://ysamm.com/?p=763 | XSS OAuth |
| https://ahmdhalabi.medium.com/pii-disclosure-of-apple-users-10k-d1e3d29bae36 | PII IDOR |
| https://blog.shiftleft.io/angular-react-vulnerability-cheatsheet-a3b36f22a0fd | Recon React |
| https://infosecwriteups.com/i-have-1-chance-to-hack-this-company-1044879f41a9 | SSRF |
| https://samcurry.net/hacking-starbucks/ | Proxy Path Traversal |
| https://whitton.io/articles/uber-turning-self-xss-into-good-xss/ | XSS |
| https://www.youtube.com/watch?v=HnI0w156rtw | Click Jacking |
| https://bitthebyte.medium.com/javascript-for-bug-bounty-hunters-part-1-dd08ed34b5a8 | Recon |
| https://bitthebyte.medium.com/javascript-for-bug-bounty-hunters-part-2-f82164917e7 | Recon |
| https://bitthebyte.medium.com/javascript-for-bug-bounty-hunters-part-3-3b987f24ab27 | Recon |
| https://portswigger.net/research/how-to-turn-security-research-into-profit | Misc |
| https://muhdaffa.medium.com/maximizing-the-potential-of-the-subfinder-562fc7e7e9e4 | Recon |
| https://medium.com/@giedrius.saulenas/the-160-hours-bug-bounty-hunting-challenge-bug-hacking-48c2550461b7 | Misc |
| https://github.com/httpvoid/writeups/blob/main/Hacking-Google-Drive-Integrations.md | SSRF |
| https://medium.com/@G0ds0nXY/403-forbidden-bypass-leading-to-admin-endpoint-access-b696a36665ed | Authorization Bypass 403 Bypass |
| https://infosecwriteups.com/stored-xss-to-account-takeover-going-beyond-document-cookie-970e42362f43 | XSS |
| https://ankitthku.medium.com/why-did-i-fail-at-bug-bounties-c621bf5bf779 | Misc |
| https://labs.detectify.com/2022/07/06/account-hijacking-using-dirty-dancing-in-sign-in-oauth-flows/ | Account Takeover OAuth |
| https://infosecwriteups.com/mail-server-misconfiguration-leads-to-sending-a-fax-from-anyones-account-on-hellofax-dropbox-bbp-aab3d97ab4e7 | Logic Misc |
| https://medium.com/@720922/a-developers-nightmare-story-of-a-simple-idor-and-some-poor-fixes-worth-1125-5ead70b0a1de | IDOR |
| https://medium.com/@ISecMax/%D1%81ookie-based-xss-exploitation-2300-bug-bounty-story-9bc532ffa564 | XSS |
| https://medium.com/@numanturle/microsoft-teams-stored-xss-bypass-csp-8b4a7f5fccbf | XSS CSP |
| https://security.lauritz-holtmann.de/advisories/flickr-account-takeover/ | Account Takeover |
| https://medium.com/intigriti/how-i-got-your-phone-number-through-facebook-223b769cccf1 | Logic Misc |
| https://engineering.atspotify.com/2013/06/creative-usernames/ | Account Takeover Logic Misc |
| https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md | RCE |
| https://buer.haus/2020/06/14/nahamcon-trash-the-cache-write-up-web-1000/ | Cache Misc |
| https://infosecwriteups.com/xxe-in-public-transport-ticketing-mobile-app-81ae245c01a1 | XXE |
| https://infosecwriteups.com/how-did-i-become-a-doctor-using-xss-vulnerability-bce190fc114a | XSS |
| https://infosecwriteups.com/how-i-scored-2k-bounty-via-an-idor-32eb2fa8aa1e | IDOR |
| https://infosecwriteups.com/server-side-request-forgery-ssrf-8e0fa290f7e6 | SSRF |
| https://medium.com/@noob.assassin/5k-misconfigured-reset-password-that-leads-to-account-takeover-no-user-interaction-ato-e6a36b8ef183 | Account Takeover Misc |
| https://ahmadaabdulla.medium.com/how-i-found-sql-injection-on-8x8-cengage-comodo-automattic-20-company-c296d1a09f63 | SQL Injection |
| https://thehackerstuff.com/my-first-xss-finding-using-knoxss/ | XSS |
| https://xhzeem.me/posts/SSRF-in-PDF-export-with-PhantomJs/read/ | SSRF |
| https://zemnmez.medium.com/how-to-hack-apple-id-f3cc9b483a41 | Recon PostMessage Misc |
| https://yasshk.medium.com/blind-ssrf-in-url-validator-93cbe7521c68 | SSRF |
| https://coffeejunkie.me/Blind-XXE-Port-Scanning/ | XXE |
| https://rodoassis.medium.com/on-ssrf-server-side-request-forgery-or-simple-stuff-rodolfo-found-part-i-4edf7ee75389 | SSRF |
| https://blog.mindedsecurity.com/2018/10/from-path-traversal-to-source-code-in.html | Path Traversal |
| https://shahjerry33.medium.com/cross-site-port-attack-a-strangers-call-c2467f93792f | XSPA Misc |
| https://medium.com/@ehsahil/recon-my-way-82b7e5f62e21 | Recon |
| https://medium.com/@shakti.gtp/an-out-of-scope-domain-leads-to-a-critical-bug-1500-f228d2c7db4b | Misc |
| https://infosecwriteups.com/why-this-simple-mistake-earned-a-5000-bug-bounty-from-reddit-d906cb46c60e | BAC IDOR Misc |
| https://medium.com/@gonzalocarrascosec/fuzzing-idor-admin-takeover-5343bb8f436e | Recon |
| https://marxchryz.medium.com/how-i-found-multiple-xss-in-hidden-legacy-pages-a57a25d8ff1f | XSS Recon |
| https://infosecwriteups.com/how-did-i-earned-6000-from-tokens-and-scopes-in-one-day-12f95c6bf8aa | Recon |
| https://caesarevan23.medium.com/ssrf-external-service-interaction-for-find-real-ip-cloudflare-and-leads-to-sql-injection-c22c02243299 | Recon SSRF SQL Injection |
| https://jinone.github.io/bugbounty-a-dom-xss/ | XSS Recon |
| https://medium.com/pentesternepal/facebook-email-disclosure-and-account-takeover-ecdb44ee12e9 | Account Takeover Recon |
| https://medium.com/@gguzelkokar.mdbf15/xss-via-account-takeover-in-e-signature-feature-worth-2500-435f3f8325bf | XSS |
| https://infosecwriteups.com/server-side-request-forgery-ssrf-testing-b9dfe57cca35 | SSRF |
| https://jakearchibald.com/2021/cors/ | CORS Misconfiguration |
| https://medium.com/@shakti.gtp/if-its-a-feature-let-s-abuse-it-for-750-19cfb9848d4b | Logic Misc |
| https://haiderm.com/how-i-was-able-to-delete-13k-microsoft-translator-projects/ | CSRF |
| https://psfauzi.medium.com/how-i-get-1350-from-idor-just-less-1-hours-7496bab1a914 | IDOR |
| https://lethanhphuc-pk.medium.com/bugbounty-xss-with-markdown-exploit-fix-on-opensource-1baecebe9645 | XSS |
| https://medium.com/@mohameddhanish98/a-story-of-dom-xss-852b6ed3bb5f | XSS |
| https://notifybugme.medium.com/exploiting-s3-bucket-with-path-folder-to-access-pii-info-of-a-bank-91d8563cb45 | AWS Misc Recon |
| https://medium.com/@kalvik/account-takeover-a-bonus-vulnerability-3c2dc4e607ea | Account Takeover |
| https://infosecwriteups.com/account-takeovers-believe-the-unbelievable-bb98a0c251a4 | Account Takeover |
| https://amakki.me/how-i-made-15k-from-remote-code-execution-vulnerability-2e1b14b3902a | RCE Recon |
| https://infosecwriteups.com/how-i-scored-1k-bounty-using-waybackurls-717d9673ca52 | Recon |
| https://akashhamal0x01.medium.com/design-flaw-a-tale-of-permanent-dos-a9ef05181083 | Logic Misc |
| https://prashantbhatkal2000.medium.com/svg-based-stored-xss-ee6e9b240dee | XSS |
| https://medium.com/@h4x0r_dz/23000-for-authentication-bypass-file-upload-arbitrary-file-overwrite-2578b730a5f8 | Auth Bypass Misc |
| https://medium.com/@aravindb26/my-first-apple-bug-and-my-first-writeup-8a833e8e953c | Auth Bypass |
| https://infosecwriteups.com/bypass-authentication-1bfab09332fe | Auth Bypass |
| https://pawanchhabria.medium.com/how-i-accessed-the-sensitive-document-which-i-had-already-deleted-adbc1e6fbb25 | Recon |
Videos
| Link | Tags |
|---|---|
| https://www.youtube.com/watch?v=HmDY7w8AbR4 | Recon |
| https://www.youtube.com/watch?v=WU1sg9aih5k | Recon |
| https://www.youtube.com/watch?v=YT5Zl2jW3wg | Recon |
| https://www.youtube.com/watch?v=FZ_7xWZ03cQ | Authentication Misc |
| https://www.youtube.com/watch?v=UyemBjyQ4qA | SSRF |
| https://www.youtube.com/watch?v=sjvW79tjWoM | Proxy Path Traversal |
| https://www.youtube.com/watch?v=cqM-MdPkaWo | Misc |
| https://www.youtube.com/watch?v=rHxVVeM9R-M | Request Smuggling |
| https://www.youtube.com/watch?v=3tpnuzFLU8g | Request Smuggling |
| https://www.youtube.com/watch?v=KN8WF1q04no | Request Smuggling |
| https://www.youtube.com/watch?v=q9rX5ty3fWI | Misc |
| https://www.youtube.com/watch?v=upEMlJeU_Ik | Request Smuggling |
| https://www.youtube.com/watch?v=0jM8dDVifaI | Recon |
| https://www.youtube.com/watch?v=skbKjO8ahCI | Recon Misc |
| https://www.youtube.com/watch?v=GeqVMOUugqY | Prototype Pollution XSS |
| https://www.youtube.com/watch?v=YoXM4m1VEM0 | Recon |
| https://www.youtube.com/watch?v=L0-aa60CZuI | Recon |
| https://www.youtube.com/watch?v=_aST_z_qTYE | SQL Injection |
| https://www.youtube.com/watch?v=ZV28JVK7afE | Misc |
| https://www.youtube.com/watch?v=AbebbJ3cRLI | Misc |
| https://www.youtube.com/watch?v=WTH6f0R7uzo | Misc |
| https://www.youtube.com/watch?v=SBCpfYFs610 | Misc |
| https://www.youtube.com/watch?v=5e_TpP6FKvU | Misc |
| https://www.youtube.com/watch?v=UovnWjksp74 | Misc |
| https://www.youtube.com/watch?v=Eai_ZXXqafw | Recon |
| https://www.youtube.com/watch?v=4d8uSwODcRY | Recon |
| https://www.youtube.com/watch?v=NuhiWBGo684 | Recon |
| https://www.youtube.com/watch?v=A6zQV9e2S1M | Recon |
Blogs to Follow
| Link |
|---|
| https://blog.deesee.xyz/ |
| https://ysamm.com |
| https://samcurry.net/ |
| https://bugs.xdavidhu.me/ |
| https://spaceraccoon.dev/ |
| https://blog.assetnote.io/ |
| https://omespino.com/ |
| https://blog.yeswehack.com/ |
| https://blog.intigriti.com |
| https://ajxchapman.github.io/ |
| https://philippeharewood.com/ |
| https://philippeharewood.com |
| https://honoki.net/ |
| https://lab.wallarm.com |
| http://securityflow.io |
| https://buer.haus/ |
| https://techblog.mediaservice.net |
| https://blog.zsec.uk/ |
| https://itm4n.github.io |
| https://snowscan.io/ |
| https://www.n00py.io |
| https://blog.redxorblue.com/ |
| https://appsecwiki.com |
| https://web-in-security.blogspot.com/ |
| https://int0x33.medium.com/ |
| https://medium.com/@jonathanbouman |
| https://medium.com/@0x0Asif/ |
| https://medium.com/@0x48piraj/ |
| https://medium.com/@0xankush/ |
| https://medium.com/@0xBarakat/ |
| https://medium.com/@0xelkot/ |
| https://medium.com/@0xgaurang/ |
| https://medium.com/@0xh7ml.py/ |
| https://medium.com/@0xHyde/ |
| https://medium.com/@0xnaeem/ |
| https://medium.com/@302Found/ |
| https://medium.com/@3bodymo/ |
| https://medium.com/@720922/ |
| https://medium.com/@7azimo/ |
| https://medium.com/@80vul/ |
| https://medium.com/@mr_beast/ |
| https://medium.com/@deshine/ |
| https://medium.com/@aa.pietruczuk/ |
| https://medium.com/@aakashadhikari786/ |
| https://medium.com/@aayushpokhrel/ |
| https://medium.com/@abaykandotcom/ |
| https://medium.com/@abbasheybati1/ |
| https://medium.com/@abdalrahman.alshammas/ |
| https://medium.com/@abdelfattahibrahim/ |
| https://medium.com/@abhijeetbiswas_/ |
| https://medium.com/@abhinavsecondary/ |
| https://medium.com/@abhinda1996/ |
| https://medium.com/@abidafahd/ |
| https://medium.com/@abireena2002/ |
| https://medium.com/@absstbh/ |
| https://medium.com/@adam.adreleve/ |
| https://medium.com/@addictrao20/ |
| https://medium.com/@adhaamsayed3/ |
| https://medium.com/@adonkidz7/ |
| https://medium.com/@adrien_jeanneau/ |
| https://medium.com/@agrawalsmart7/ |
| https://medium.com/@airlanggamurthi/ |
| https://medium.com/@aishwaryakendle/ |
| https://medium.com/@akshukatkar/ |
| https://medium.com/@albeckshahar/ |
| https://medium.com/@alex.birsan/ |
| https://medium.com/@alirazzaq/ |
| https://medium.com/@alonnsoandres/ |
| https://medium.com/@Alra3ees/ |
| https://medium.com/@alyanwar/ |
| https://medium.com/@amangupta566/ |
| https://medium.com/@ameerassadi/ |
| https://medium.com/@amineaboud/ |
| https://medium.com/@amithc38/ |
| https://medium.com/@amnotacat/ |
| https://medium.com/@androgaming1912/ |
| https://medium.com/@aniltom/ |
| https://medium.com/@ariffadhlullah2310/ |
| https://medium.com/@armandjasharaj/ |
| https://medium.com/@ashlyn.lau_17206/ |
| https://medium.com/@ashokcpg/ |
| https://medium.com/@AvyuktSyrine/ |
| https://medium.com/@b0x_in/ |
| https://medium.com/@bababounty99/ |
| https://medium.com/@bachrudinashari/ |
| https://medium.com/@baibhavanandjha/ |
| https://medium.com/@balook/ |
| https://medium.com/@behnam.yazdanpanah/ |
| https://medium.com/@ben.aymen.182/ |
| https://medium.com/@bhatiagaurav1211/ |
| https://medium.com/@bilalmerokhel/ |
| https://medium.com/@Bishoo97x/ |
| https://medium.com/@black_b/ |
| https://medium.com/@bobvanderstaak/ |
| https://medium.com/@carlosdanielgiovanella/ |
| https://medium.com/@cc1h2e1/ |
| https://medium.com/@ChandSingh/ |
| https://medium.com/@Cho0k/ |
| https://medium.com/@CI_Fuzz/ |
| https://medium.com/@circleninja/ |
| https://medium.com/@cyberali/ |
| https://medium.com/@Cybervenom/ |
| https://medium.com/@d.harish008/ |
| https://medium.com/@D0rkerDevil/ |
| https://medium.com/@daniel.thatcher/ |
| https://medium.com/@DarkMatterMatt/ |
| https://medium.com/@Dhamuharker/ |
| https://medium.com/@dheerajkmadhukar/ |
| https://medium.com/@dirtycoder0124/ |
| https://medium.com/@DK999/ |
| https://medium.com/@ducanhbui/ |
| https://medium.com/@erik.wynter/ |
| https://medium.com/@escapesequence89/ |
| https://medium.com/@EX_097/ |
| https://medium.com/@faique/ |
| https://medium.com/@fbotes2/ |
| https://medium.com/@frycos/ |
| https://medium.com/@GeneralEG/ |
| https://medium.com/@girishbo58/ |
| https://medium.com/@goyalvartul/ |
| https://medium.com/@h4x0r_dz/ |
| https://medium.com/@Hacker0x01/ |
| https://medium.com/@hackerb0y/ |
| https://medium.com/@harrmahar/ |
| https://medium.com/@haxor8595/ |
| https://medium.com/@Hossam.Mesbah/ |
| https://medium.com/@hungrybytes/ |
| https://medium.com/@Iam5345/ |
| https://medium.com/@ifediri/ |
| https://medium.com/@iknowhatodo/ |
| https://medium.com/@impratikdabhi/ |
| https://medium.com/@imunissar786/ |
| https://medium.com/@ironfisto/ |
| https://medium.com/@IroquoisPliskin/ |
| https://medium.com/@Jacksonkv22/ |
| https://medium.com/@jacopotediosi/ |
| https://medium.com/@JubaBaghdad/ |
| https://medium.com/@Kntjrld/ |
| https://medium.com/@LogicalHunter/ |
| https://medium.com/@M0X0101/ |
| https://medium.com/@Mr.Daman.Singh/ |
| https://medium.com/@Mthirup/ |
| https://medium.com/@N0_M3ga_Hacks/ |
| https://medium.com/@NahamSec/ |
| https://medium.com/@NinadMishra/ |
| https://medium.com/@Parag_Bagul/ |
| https://medium.com/@R0X4R/ |
| https://medium.com/@RheyJuls/ |
| https://medium.com/@Sheshasai/ |
| https://medium.com/@SkiMask0/ |
| https://medium.com/@Skylinearafat/ |
| https://medium.com/@SQLiBasic/ |
| https://medium.com/@St00rm/ |
| https://medium.com/@StealthyBugs/ |
| https://medium.com/@Steiner254/ |
| https://medium.com/@SyntaxError4/ |
| https://medium.com/@TheKomodoconsulting/ |
| https://medium.com/@TheShahzada/ |
| https://medium.com/@Thuva11/ |
| https://medium.com/@TnMch/ |
| https://medium.com/@Wh11teW0lf/ |
| https://medium.com/@YumiSec/ |
| https://medium.com/@ZishanAdThandar/ |
| https://medium.com/@cappriciosec |
| https://medium.com/@newp_th |
| https://medium.com/@pdelteil |
| https://medium.com/@tomnomnom |
| https://medium.com/intigriti |
| https://medium.com//towards-aws |
| https://regilero.github.io |
| https://portswigger.net/research |
| https://0xpatrik.com/ |
| https://blog.it-securityguard.com/ |
| https://pwning.re/ |
| https://labs.detectify.com |
| https://blog.appsecco.com |
| https://ahussam.me/ |
| https://www.arneswinnen.net/ |
| https://tisiphone.net/ |
| https://blog.innerht.ml |
| https://seanmelia.wordpress.com/ |
| https://gracefulsecurity.com |
| https://klikki.fi |
| https://www.jonbottarini.com |
| https://shubs.io |
| https://www.infosecmatter.com/bug-bounty-tips |
| https://0day.click/ |
| https://coffeejunkie.me/ |
| https://xvnpw.github.io/ |
| https://vavkamil.cz/ |
| https://googleprojectzero.blogspot.com/ |
| https://tomorrowisnew.com/ |
| https://skeletonscribe.net/ |
| https://blog.etclab.top/ |
| https://whitton.io |
| https://bugra.ninja/ |
| https://johannh.me/ |
| https://samczsun.com |
| https://0xdekster.medium.com/ |
| https://0x0021h.medium.com/ |
| https://0x01alka.medium.com/ |
| https://0x2m.medium.com/ |
| https://0x4kd.medium.com/ |
| https://0xbadb00da.medium.com/ |
| https://0xgad.medium.com/ |
| https://0xgaurang.medium.com/ |
| https://0xjin.medium.com/ |
| https://0xm5awy.medium.com/ |
| https://0xmahmoudjo0.medium.com/ |
| https://0xmayankgarg.medium.com/ |
| https://0xraminfosec.medium.com/ |
| https://0xt4144t.medium.com/ |
| https://16521092.medium.com/ |
| https://3bodymo.medium.com/ |
| https://4bdoz.medium.com/ |
| https://a-constant.medium.com/ |
| https://abhishekmorla.medium.com/ |
| https://ahmadaabdulla.medium.com/ |
| https://ahmdhalabi.medium.com/ |
| https://ahmed8magdy.medium.com/ |
| https://aidilarf.medium.com/ |
| https://akashhamal0x01.medium.com/ |
| https://akshartank.medium.com/ |
| https://akshayravic09yc47.medium.com/ |
| https://alpinnnnnn13.medium.com/ |
| https://amit-lt.medium.com/ |
| https://andrei-abakumov.medium.com/ |
| https://aob-89072.medium.com/ |
| https://apth3hack3r.medium.com/ |
| https://ashok314.medium.com/ |
| https://balapraneeth.medium.com/ |
| https://basyounii.medium.com/ |
| https://bendtheory.medium.com/ |
| https://bhupendra1238.medium.com/ |
| https://binamrapandey.medium.com/ |
| https://bugbountyhunter.medium.com/ |
| https://bughunter25.medium.com/ |
| https://bxmbn.medium.com/ |
| https://c0nqr0r.medium.com/ |
| https://caesarevan23.medium.com/ |
| https://captainhoook.medium.com/ |
| https://cirius.medium.com/ |
| https://clarkvoss.medium.com/ |
| https://cyberguy0xd1.medium.com/ |
| https://cyc10n3.medium.com/ |
| https://d0nut.medium.com/ |
| https://daturamater.medium.com/ |
| https://debprasadbanerjee502.medium.com/ |
| https://dewangpanchal98.medium.com/ |
| https://dhakalbibek.medium.com/ |
| https://divyanshsharma2401.medium.com/ |
| https://dphoeniixx.medium.com/ |
| https://dragon-sec.medium.com/ |
| https://dudy2kk.medium.com/ |
| https://edmundaa222.medium.com/ |
| https://emanuel-beni.medium.com/ |
| https://engrinside.medium.com/ |
| https://ertugrull.medium.com/ |
| https://faizanwrites.medium.com/ |
| https://falcnix.medium.com/ |
| https://fardeen-ahmed.medium.com/ |
| https://fatnassifiras.medium.com/ |
| https://filipaze.medium.com/ |
| https://flattsecurity.medium.com/ |
| https://fuomag9.medium.com/ |
| https://geekboyranjeet.medium.com/ |
| https://gevakun.medium.com/ |
| https://gokulap.medium.com/ |
| https://hajarerutik9.medium.com/ |
| https://hamzadzworm.medium.com/ |
| https://hemantsolo.medium.com/ |
| https://hencohen10.medium.com/ |
| https://hetroublemakr.medium.com/ |
| https://hunter-55.medium.com/ |
| https://iamsaugat.medium.com/ |
| https://imranhudaa.medium.com/ |
| https://inakcf.medium.com/ |
| https://infosecwriteups.com/ |
| https://irsl.medium.com/ |
| https://ivreznap.medium.com/ |
| https://ja1sharma.medium.com/ |
| https://jayateerthag.medium.com/ |
| https://jmrcsnchz.medium.com/ |
| https://joelmcg1993.medium.com/ |
| https://jonathandata1.medium.com/ |
| https://jowin922.medium.com/ |
| https://junoonbro.medium.com/ |
| https://jychp.medium.com/ |
| https://kabilan1290.medium.com/ |
| https://kaif0x01.medium.com/ |
| https://kingcoolvikas.medium.com/ |
| https://kingkaran977.medium.com/ |
| https://komradz86.medium.com/ |
| https://krevetk0.medium.com/ |
| https://lethanhphuc-pk.medium.com/ |
| https://logicbomb.medium.com/ |
| https://ltsirkov.medium.com/ |
| https://maordayanofficial.medium.com/ |
| https://marxchryz.medium.com/ |
| https://master-sec.medium.com/ |
| https://maxva.medium.com/ |
| https://mearegtu.medium.com/ |
| https://med-mahmoudi26.medium.com/ |
| https://mehedishakeel.medium.com/ |
| https://mickeydebaets.medium.com/ |
| https://mikekitckchan.medium.com/ |
| https://mikey96.medium.com/ |
| https://mikko-kenttala.medium.com/ |
| https://mohamedtarekq.medium.com/ |
| https://mohsinalibukc.medium.com/ |
| https://mokhansec.medium.com/ |
| https://mr23r0.medium.com/ |
| https://mrpentestguy.medium.com/ |
| https://mtechghost.medium.com/ |
| https://muhammad-aamir.medium.com/ |
| https://mvinni.medium.com/ |
| https://n0lsec.medium.com/ |
| https://n1ghtmar3.medium.com/ |
| https://nassimchami.medium.com/ |
| https://naveenroy008.medium.com/ |
| https://neroli.medium.com/ |
| https://nmochea.medium.com/ |
| https://noob3xploiter.medium.com/ |
| https://notifybugme.medium.com/ |
| https://notmarshmllow.medium.com/ |
| https://nullr3x.medium.com/ |
| https://nvk0x.medium.com/ |
| https://officialaimm.medium.com/ |
| https://orwaatyat.medium.com/ |
| https://otmastimi.medium.com/ |
| https://ozguralp.medium.com/ |
| https://pallabjyoti218.medium.com/ |
| https://parasarora06.medium.com/ |
| https://petrusviet.medium.com/ |
| https://ph-hitachi.medium.com/ |
| https://pharish4948.medium.com/ |
| https://polarply.medium.com/ |
| https://prajwoldhungana487.medium.com/ |
| https://prashantbhatkal2000.medium.com/ |
| https://priyankraval.medium.com/ |
| https://pullerjsecu.medium.com/ |
| https://r4id3n.medium.com/ |
| https://rafipiun.medium.com/ |
| https://rakesh-thodupunoori.medium.com/ |
| https://randyarios.medium.com/ |
| https://rikeshbaniyaaa.medium.com/ |
| https://riteshgohil-25.medium.com/ |
| https://rohit-soni.medium.com/ |
| https://rohit443.medium.com/ |
| https://ronak-9889.medium.com/ |
| https://ruvlol.medium.com/ |
| https://rv09.medium.com/ |
| https://s3c.medium.com/ |
| https://saadahmedx.medium.com/ |
| https://sagarsajeev.medium.com/ |
| https://sank-dahal.medium.com/ |
| https://santoshdbobade.medium.com/ |
| https://sapt.medium.com/ |
| https://seqrity.medium.com/ |
| https://shafouz.medium.com/ |
| https://shail-official.medium.com/ |
| https://sharanthehunter.medium.com/ |
| https://sharmajijvs.medium.com/ |
| https://shellbr3ak.medium.com/ |
| https://sheshasai.medium.com/ |
| https://shreyaskoli.medium.com/ |
| https://shrirangdiwakar.medium.com/ |
| https://shubhdeepp.medium.com/ |
| https://sirleeroyjenkins.medium.com/ |
| https://sm4rty.medium.com/ |
| https://spongebhav.medium.com/ |
| https://sunilyedla.medium.com/ |
| https://surya-dev.medium.com/ |
| https://sushant-kamble.medium.com/ |
| https://thevillagehacker.medium.com/ |
| https://thexssrat.medium.com/ |
| https://tmosh.medium.com/ |
| https://tusharvaidya16.medium.com/ |
| https://u-itachi.medium.com/ |
| https://v3d.medium.com/ |
| https://valsamaras.medium.com/ |
| https://vanshal.medium.com/ |
| https://varmaanu001.medium.com/ |
| https://vbharad.medium.com/ |
| https://vengeance.medium.com/ |
| https://veshraj.medium.com/ |
| https://vickieli.medium.com/ |
| https://vijetareigns.medium.com/ |
| https://vikaran101.medium.com/ |
| https://virdoexhunter.medium.com/ |
| https://virtuvil.medium.com/ |
| https://wahaz.medium.com/ |
| https://x-vector.medium.com/ |
| https://xcoder074.medium.com/ |
| https://xko2x.medium.com/ |
| https://xkurtph.medium.com/ |
| https://xthemo.medium.com/ |
| https://y0ungdst.medium.com/ |
| https://yaseenzubair.medium.com/ |
| https://yasshk.medium.com/ |
| https://yilmazcanyigit.medium.com/ |
| https://ynoof.medium.com/ |
| https://zemnmez.medium.com/ |
| https://zerocode-ph.medium.com/ |
| https://zoidsec.medium.com/ |
| https://zonduu.medium.com/ |
| https://zseano.medium.com/ |
| https://www.bugbountyhunting.com/ |
Medium Tags to Follow
| Link |
|---|
| https://medium.com/tag/application-security |
| https://medium.com/tag/hacking |
| https://medium.com/tag/infosec |
| https://medium.com/tag/cybersecurity |
| https://medium.com/tag/ctf |
| https://medium.com/tag/penetration-testing |
| https://medium.com/tag/writeup |
| https://medium.com/tag/tryhackme |
| https://medium.com/tag/vulnhub |
| https://medium.com/tag/bug-hunter |
| https://medium.com/tag/bug-bounty |
| https://medium.com/tag/info-sec-writeups |
| https://medium.com/tag/hackthebox-writeup |
| https://medium.com/tag/ethical-hacking |
| https://medium.com/tag/api-security |
| https://medium.com/tag/javascript |
| https://medium.com/tag/xss |
| https://medium.com/tag/sqli |
| https://medium.com/tag/ssrf |
| https://medium.com/tag/rce |
| https://medium.com/tag/xss-vulnerability |
| https://medium.com/tag/rce-vulnerability |
| https://medium.com/tag/sql-injection |
| https://medium.com/tag/bug-bounty-writeup |
| https://medium.com/tag/recon |
| https://medium.com/tag/bugbounty-writeup |
| https://medium.com/tag/bug-bounty-tips |
People to Follow
| Link |
|---|
| https://twitter.com/GoogleVRP |
| https://twitter.com/BugBountyHunt3r |
| https://twitter.com/Assass1nmarcos |
| https://twitter.com/harris0ft |
| https://twitter.com/hackthebox_eu |
| https://twitter.com/RealTryHackMe |
| https://twitter.com/0dayCTF |
| https://twitter.com/oooverflow |
| https://twitter.com/theXSSrat |
| https://twitter.com/intigriti |
| https://twitter.com/TCMSecurity |
| https://twitter.com/_JohnHammond |
| https://twitter.com/InfoSecComm |
| https://twitter.com/ReconVillage |
| https://twitter.com/WebSecAcademy |
| https://twitter.com/pdiscoveryio |
| https://twitter.com/XssPayloads |
| https://twitter.com/unlikeyou10 |
| https://twitter.com/securitytrails |
| https://twitter.com/TomNomNom |
| https://twitter.com/TheBugBot |
| https://twitter.com/thecybermentor |
| https://twitter.com/NahamSec |
| https://twitter.com/GoSecure_Inc |
| https://twitter.com/HackRead |
| https://twitter.com/mpgn_x64 |
| https://twitter.com/thedawgyg |
| https://twitter.com/YourNextBugTip |
| https://twitter.com/fransrosen |
| https://twitter.com/avlidienbrunn |
| https://twitter.com/smiegles |
| https://twitter.com/jobertabma |
| https://twitter.com/stokfredrik |
| https://twitter.com/gerben_javado |
| https://twitter.com/itscachemoney |
| https://twitter.com/Yassineaboukir |
| https://twitter.com/emgeekboy |
| https://twitter.com/ITSecurityguard |
| https://twitter.com/EdOverflow |
| https://twitter.com/x1m_martijn |
| https://twitter.com/NathOnSecurity |
| https://twitter.com/Th3G3nt3lman |
| https://twitter.com/uraniumhacker |
| https://twitter.com/santi_lopezz99 |
| https://twitter.com/iamnoooob |
| https://twitter.com/bbuerhaus |
| https://twitter.com/rootxharsh |
| https://twitter.com/Paresh_parmar1 |
| https://twitter.com/0xteknogeek |
| https://twitter.com/Abdulahhusam |
| https://twitter.com/zseano |
| https://twitter.com/ngalongc |
| https://twitter.com/Parth_Malhotra |
| https://twitter.com/prateek_0490 |
| https://twitter.com/HivarekarPranav |
| https://twitter.com/niksthehacker |
| https://twitter.com/ehrishiraj |
| https://twitter.com/princechaddha |
| https://twitter.com/v0sx9b |
| https://twitter.com/nnwakelam |
| https://twitter.com/securinti |
| https://twitter.com/mskwsky |
| https://twitter.com/bhavukjain1 |
| https://twitter.com/logicbomb_1 |
| https://twitter.com/Alra3ees |
| https://twitter.com/Zigoo0 |
| https://twitter.com/garagosy |
| https://twitter.com/akhilreni_hs |
| https://twitter.com/akita_zen |
| https://twitter.com/mongobug |
| https://twitter.com/ArbazKiraak |
| https://twitter.com/Jhaddix |
| https://twitter.com/0x0luke |
| https://twitter.com/0xacb |
| https://twitter.com/0xd0m7 |
| https://twitter.com/0xInfection |
| https://twitter.com/0xpatrik |
| https://twitter.com/11xuxx |
| https://twitter.com/1ndianl33t |
| https://twitter.com/adrien_jeanneau |
| https://twitter.com/AEMSecurity |
| https://twitter.com/Agarri_FR |
| https://twitter.com/ajxchapman |
| https://twitter.com/albinowax |
| https://twitter.com/alicanact60 |
| https://twitter.com/Almroot |
| https://twitter.com/alxbrsn |
| https://twitter.com/Alyssa_Herrera_/ |
| https://twitter.com/ameenmaali |
| https://twitter.com/andirrahmani1 |
| https://twitter.com/anshuman_bh |
| https://twitter.com/ap_ceng |
| https://twitter.com/ArchAngelDDay |
| https://twitter.com/arneswinnen |
| https://twitter.com/atul_hax |
| https://twitter.com/B3nac |
| https://twitter.com/bendtheory |
| https://twitter.com/bitquark |
| https://twitter.com/Black2Fan |
| https://twitter.com/BonJarber |
| https://twitter.com/brxxnh1 |
| https://twitter.com/bsysop |
| https://twitter.com/BugBountyHQ |
| https://twitter.com/bug_dutch |
| https://twitter.com/chevonphillip |
| https://twitter.com/codecancare |
| https://twitter.com/codingo_/ |
| https://twitter.com/Corb3nik |
| https://twitter.com/d0nutptr |
| https://twitter.com/damian_89_/ |
| https://twitter.com/dee__see |
| https://twitter.com/defparam |
| https://twitter.com/dhauenstein |
| https://twitter.com/eboda_/ |
| https://twitter.com/erbbysam |
| https://twitter.com/eur0pa_/ |
| https://twitter.com/farah_hawa01 |
| https://twitter.com/filedescriptor |
| https://twitter.com/foobar0x7 |
| https://twitter.com/garethheyes |
| https://twitter.com/gehaxelt |
| https://twitter.com/gregxsunday |
| https://twitter.com/Gromak123_Sec |
| https://twitter.com/gwendallecoguic |
| https://twitter.com/h1_sp1d3r |
| https://twitter.com/hacker_/ |
| https://twitter.com/hahwul |
| https://twitter.com/hakluke |
| https://twitter.com/hateshaped |
| https://twitter.com/HazanaSec |
| https://twitter.com/hgreal1 |
| https://twitter.com/honoki |
| https://twitter.com/HusseiN98D |
| https://twitter.com/Hxzeroone |
| https://twitter.com/IAmMandatory |
| https://twitter.com/imranparray101 |
| https://twitter.com/inhibitor181 |
| https://twitter.com/InsiderPhD |
| https://twitter.com/irsdl |
| https://twitter.com/jackds1986 |
| https://twitter.com/jackhcable |
| https://twitter.com/jinonehk |
| https://twitter.com/JohnH4X00R |
| https://twitter.com/JonathanBouman |
| https://twitter.com/jon_bottarini |
| https://twitter.com/joohoi |
| https://twitter.com/JR0ch17 |
| https://twitter.com/jstnkndy |
| https://twitter.com/kapytein |
| https://twitter.com/KasperFritzo |
| https://twitter.com/kazan71p |
| https://twitter.com/Masonhck3571 |
| https://twitter.com/MasteringBurp |
| https://twitter.com/mcipekci |
| https://twitter.com/Michael1026H1 |
| https://twitter.com/michenriksen |
| https://twitter.com/Mik317_/ |
| https://twitter.com/MrMustacheMan3 |
| https://twitter.com/MrTuxracer |
| https://twitter.com/nader_brandi |
| https://twitter.com/nahoragg |
| https://twitter.com/nbk_2000 |
| https://twitter.com/ngkogkos |
| https://twitter.com/ngocdh |
| https://twitter.com/nijagaw |
| https://twitter.com/not_an_aardvark |
| https://twitter.com/nullenc0de |
| https://twitter.com/orange_8361 |
| https://twitter.com/p4fg |
| https://twitter.com/PascalSec |
| https://twitter.com/PentesterLand |
| https://twitter.com/plmaltais |
| https://twitter.com/pnig0s |
| https://twitter.com/pudsec |
| https://twitter.com/r0bre |
| https://twitter.com/r0hack |
| https://twitter.com/r0x33d |
| https://twitter.com/restr1ct3d |
| https://twitter.com/rez0__/ |
| https://twitter.com/Rhynorater |
| https://twitter.com/rhyselsmore |
| https://twitter.com/RockyBandana |
| https://twitter.com/rohk_infosec |
| https://twitter.com/rub003 |
| https://twitter.com/_ruby |
| https://twitter.com/rwincey |
| https://twitter.com/Sambal0x |
| https://twitter.com/samengmg |
| https://twitter.com/Samm0uda |
| https://twitter.com/samwcyo |
| https://twitter.com/satishb3 |
| https://twitter.com/SaxX/ |
| https://twitter.com/seanmeals |
| https://twitter.com/seanyeoh |
| https://twitter.com/SebMorin1 |
| https://twitter.com/securibee |
| https://twitter.com/securitybites |
| https://twitter.com/SecurityMB |
| https://twitter.com/shailesh4594 |
| https://twitter.com/shmilylty |
| https://twitter.com/shub66452 |
| https://twitter.com/skeltavik |
| https://twitter.com/sml555_/ |
| https://twitter.com/snyff |
| https://twitter.com/soaj1664ashar |
| https://twitter.com/spaceraccoonsec |
| https://twitter.com/_staaldraad |
| https://twitter.com/StanFaas |
| https://twitter.com/steve_mcilwain |
| https://twitter.com/streaak |
| https://twitter.com/sushiwushi2 |
| https://twitter.com/sw33tLie |
| https://twitter.com/theflofly |
| https://twitter.com/twitt3raccnt |
| https://twitter.com/vinodsparrow |
| https://twitter.com/vortexau |
| https://twitter.com/vp440 |
| https://twitter.com/Wh11teW0lf |
| https://twitter.com/xEHLE_/ |
| https://twitter.com/yaworsk |
| https://twitter.com/yip404 |
| https://twitter.com/zeroxyele |
| https://twitter.com/d00xing |
| https://twitter.com/m0chan98 |
| https://twitter.com/_jensec |
| https://twitter.com/naglinagli |
| https://twitter.com/infosec_au |
| https://twitter.com/jonathandata1 |
| https://twitter.com/sheikhrishad0 |
| https://twitter.com/melardev |
| https://twitter.com/zonduu1 |
| https://twitter.com/godiego_/ |
| https://twitter.com/LamScun |
| https://twitter.com/hrithikbot |
| https://twitter.com/@harris0ft |
| https://twitter.com/gui_scombatti |
| https://twitter.com/proabiral |
| https://twitter.com/xhzeem |
| https://twitter.com/regala_/ |
| https://twitter.com/adrianovalle |
| https://twitter.com/Sachin_kumar174 |
| https://twitter.com/prakashpanta268 |
| https://twitter.com/niemand_sec |
| https://twitter.com/amanmahendra_/ |
| https://twitter.com/Geva_7 |
| https://twitter.com/djurado9 |
| https://twitter.com/iangcarroll |
| https://twitter.com/_Base_64 |
| https://twitter.com/yassinek3ch |
| https://twitter.com/derisionsec |
| https://twitter.com/pxmme1337 |
| https://twitter.com/z33_5h4n |
| https://twitter.com/dhakal_ananda |
| https://twitter.com/lean0x2f |
| https://twitter.com/Akshanshjaiswl |
| https://twitter.com/queseguridad |
| https://twitter.com/ashwarya_me |
| https://twitter.com/theabrahack |
| https://twitter.com/Krevetk0Valeriy |
| https://twitter.com/mdisrail2468 |
| https://twitter.com/sunilyedla2 |
| https://twitter.com/Hogarth45_/ |
| https://twitter.com/bogdantcaciuc7 |
| https://twitter.com/zanezenzane |
| https://twitter.com/sushantdhopat |
| https://twitter.com/0nlymohammed |
| https://twitter.com/jihk |
| https://twitter.com/engi_arp |
| https://twitter.com/0xDexter0us |
| https://twitter.com/n1m0_/ |
| https://twitter.com/hipotermia |
| https://twitter.com/itsafolic |
| https://twitter.com/alp0x01 |
| https://twitter.com/HolyBugx |
| https://twitter.com/ctbbpodcast |
| https://twitter.com/thebinarybot |
| https://twitter.com/sudhanshur705 |
| https://twitter.com/renniepak |
| https://twitter.com/PhilippeDelteil |
| https://twitter.com/iustinBB |
| https://twitter.com/0xLupin |
| https://twitter.com/lu3ky13 |
| https://twitter.com/HackerOn2Wheels |
| https://twitter.com/rene_kroka |
| https://twitter.com/ReconOne_bk |
| https://twitter.com/Fozisimi143 |
| https://twitter.com/BountyOverflow |
| https://twitter.com/realhacking_/ |
| https://twitter.com/bxmbn |
| https://twitter.com/0xmahmoudJo0 |
| https://twitter.com/af4himi |
| https://twitter.com/tabaahi_ |
| https://twitter.com/AkashHamal0x01 |
| https://twitter.com/zapstiko |
| https://twitter.com/BurpSuiteTips |
| https://twitter.com/Six2dez1 |
| https://twitter.com/remonsec |
| https://twitter.com/0xMstar |
| https://twitter.com/Dinosn |
| https://twitter.com/ADITYASHENDE17 |
| https://twitter.com/dhakal__bibek |
| https://twitter.com/TakSec |
| https://twitter.com/httpvoid0x2f |
GitHub
| Link |
|---|
| https://github.com/s0md3v |
| https://github.com/tomnomnom |
| https://github.com/michenriksen |
| https://github.com/codingo |
| https://github.com/Ice3man543 |
| https://github.com/nahamsec |
| https://github.com/aboul3la |
| https://github.com/maurosoria |
| https://github.com/guelfoweb |
| https://github.com/caffix/ |
| https://github.com/gwen001/ |
| https://github.com/m0chan |
| https://github.com/naglinagli |
| https://github.com/infosec-au |
| https://github.com/jonathandata1 |
| https://github.com/hackerrishad |
| https://github.com/melardev |
| https://github.com/diego95root |
| https://github.com/proabiral |
| https://github.com/xhzeem |
| https://github.com/Rhynorater |
| https://github.com/niemand-sec |
| https://github.com/amanmahendra00 |
| https://github.com/lc |
| https://github.com/0d4rujd |
| https://github.com/Pxmme |
| https://github.com/lean0x2f |
| https://github.com/jaiswalakshansh |
| https://github.com/nnez |
| https://github.com/sushantdhopat |
| https://github.com/OldMohamm |
| https://github.com/Ji |
| https://github.com/0xDexter0us |
| https://github.com/hipotermia |
YouTube
| Link |
|---|
| https://www.youtube.com/@LiveOverflow |
| https://www.youtube.com/@xdavidhu |
| https://www.youtube.com/channel/UCZDyl7G-Lq-EMVO8PfDFp9g |
| https://www.youtube.com/c/Nahamsec |
| https://www.youtube.com/c/STOKfredrik |
| https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA |
| https://www.youtube.com/channel/UCCUFgj-52_ryvpQUacylRpg |
| https://www.youtube.com/c/TheCyberMentor |
| https://www.youtube.com/channel/UCPiN9NPjIer8Do9gUFxKv7A |
| https://www.youtube.com/channel/UCq9IyPMXiwD8yBFHkxmN8zg |
| https://www.youtube.com/user/cristivlad25 |
| https://www.youtube.com/channel/UCCzvz8jsulXm27Cd6k3vzyg |
| https://www.youtube.com/channel/UCARsgS1stRbRgh99E63Q3ng |
| https://www.youtube.com/channel/UCUfO02gdMDXgOJWdv_jiLMg |
| https://www.youtube.com/channel/UC0ZTPkdxlAKf-V33tqXwi3Q |
| https://www.youtube.com/c/TheXSSrat |
| https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w |
| https://www.youtube.com/user/DEFCONConference |
| https://www.youtube.com/user/Hak5Darren |
| https://www.youtube.com/channel/UCPPAYs04kwfXcHnerm_ueFw |
| https://www.youtube.com/channel/UCJ6q9Ie29ajGqKApbLqfBOg |
| https://www.youtube.com/channel/UCRFG_j0cgLWtJOG6fl_-rxQ |
| https://www.youtube.com/channel/UC286ntgASMskhPIJQebJVvA |
| https://www.youtube.com/user/TomNomNomDotCom |
| https://www.youtube.com/jhaddix |
| https://www.youtube.com/user/BruteLogic |
| https://www.youtube.com/channel/UCXPdZsu8g1nKerd-o5A75vA |
| https://www.youtube.com/user/RootOfTheNull |
| https://www.youtube.com/channel/UCF75UK6iUcHxUdC8OMw7w4A |
| https://www.youtube.com/channel/UCDqZyVCTwg9UyRWKgQ7Gizg |
| https://www.youtube.com/c/CristiVladZ |
| https://www.youtube.com/channel/UCszyA_7DVMz63bI30NW2a_g |
Discord Servers to Join
| Name | Invitation Link |
|---|---|
| nahamsec | https://discord.gg/8UNzjTRGCc |
| Hacker101 | https://discord.gg/WrCTm8h |
| Bugcrowd | https://discord.com/invite/TWr3Brs |
| Intigriti | https://discord.gg/cTCEq7eGXg |
| DEF CON | https://discord.gg/defcon |
| Bounty Hunter | https://discord.gg/bugbounty |
| InfoSec Community | https://discord.gg/tRNUXNPMSV |
Voorivex