Bug Bounty Hunting

6.

Web Application Vulnerabilities

6.1.

Injection Vulnerabilities

6.1.1.

6.1.1.1.

In-Band SQL Injection

6.1.1.1.1.

Error-Based Injection

6.1.1.1.2.

Union-Based Injection

6.1.1.1.3.

Boolean-Based Blind Injection

6.1.1.2.

Time-Based Blind SQL Injection

6.1.1.2.1.

Delay Techniques

6.1.1.2.2.

Response Time Analysis

6.1.1.3.

Out-of-Band SQL Injection

6.1.1.3.1.

DNS Exfiltration

6.1.1.3.2.

6.1.1.4.

Database-Specific Techniques

6.1.1.4.1.

MySQL Injection

6.1.1.4.2.

PostgreSQL Injection

6.1.1.4.3.

MSSQL Injection

6.1.1.4.4.

Oracle Injection

6.1.2.

NoSQL Injection

6.1.2.1.

MongoDB Injection

6.1.2.1.1.

Authentication Bypass

6.1.2.1.2.

Data Extraction

6.1.2.2.

CouchDB Injection

6.1.2.3.

Redis Injection

6.1.3.

Command Injection

6.1.3.1.

OS Command Injection

6.1.3.1.1.

Direct Command Execution

6.1.3.1.2.

Command Chaining

6.1.3.2.

Blind Command Injection

6.1.3.2.1.

Time-Based Detection

6.1.3.2.2.

Out-of-Band Detection

6.1.4.

6.1.4.1.

Authentication Bypass

6.1.4.2.

Information Disclosure

6.1.5.

XPath Injection

6.1.5.1.

XML Data Extraction

6.1.5.2.

Authentication Bypass

6.2.

Cross-Site Scripting (XSS)

6.2.1.

6.2.1.1.

URL Parameter Injection

6.2.1.2.

Form Input Injection

6.2.1.3.

HTTP Header Injection

6.2.2.

6.2.2.1.

Database Storage

6.2.2.2.

File System Storage

6.2.2.3.

Log File Injection

6.2.3.

6.2.3.1.

Client-Side Vulnerabilities

6.2.3.2.

JavaScript Sink Analysis

6.2.4.

XSS Filter Bypass

6.2.4.1.

Encoding Techniques

6.2.4.2.

Polyglot Payloads

6.2.4.3.

Context-Specific Bypasses

6.3.

Authentication and Session Vulnerabilities

6.3.1.

Broken Authentication

6.3.1.1.

Credential Stuffing

6.3.1.2.

Password Spraying

6.3.1.3.

Brute Force Attacks

6.3.2.

Session Management Flaws

6.3.2.1.

Session Fixation

6.3.2.2.

Session Hijacking

6.3.2.3.

Insecure Session Storage

6.3.3.

Multi-Factor Authentication Bypass

6.3.3.1.

SMS Interception

6.3.3.2.

TOTP Manipulation

6.3.3.3.

Backup Code Abuse

6.3.4.

JWT Vulnerabilities

6.3.4.1.

Algorithm Confusion

6.3.4.2.

6.3.4.3.

Token Manipulation

6.3.4.4.

Signature Bypass

6.4.

Access Control Vulnerabilities

6.4.1.

Broken Access Control

6.4.1.1.

Vertical Privilege Escalation

6.4.1.2.

Horizontal Privilege Escalation

6.4.1.3.

Function-Level Access Control

6.4.2.

Insecure Direct Object References

6.4.2.1.

6.4.2.2.

6.4.2.3.

6.4.3.

6.4.3.1.

Directory Traversal

6.4.3.2.

File Inclusion Vulnerabilities

6.4.3.2.1.

Local File Inclusion

6.4.3.2.2.

Remote File Inclusion

6.4.4.

Missing Authorization

6.4.4.1.

Administrative Function Access

6.4.4.2.

API Endpoint Access

6.5.

Security Misconfiguration

6.5.1.

Default Configurations

6.5.1.1.

Default Credentials

6.5.1.2.

Default Settings

6.5.2.

Information Disclosure

6.5.2.1.

Verbose Error Messages

6.5.2.2.

Debug Information

6.5.2.3.

Source Code Exposure

6.5.3.

Unprotected Resources

6.5.3.1.

Administrative Interfaces

6.5.3.2.

Configuration Files

6.5.3.3.

6.5.4.

Cloud Storage Misconfigurations

6.5.4.1.

AWS S3 Bucket Permissions

6.5.4.2.

Azure Blob Storage

6.5.4.3.

Google Cloud Storage

6.6.

Cross-Site Request Forgery (CSRF)

6.6.1.

6.6.2.

POST-Based CSRF

6.6.3.

CSRF Token Bypass

6.6.4.

SameSite Cookie Bypass

6.7.

Server-Side Request Forgery (SSRF)

6.7.1.

Internal Network Access

6.7.2.

Cloud Metadata Access

6.7.3.

Port Scanning via SSRF

6.7.4.

Protocol Smuggling

6.8.

XML-Related Vulnerabilities

6.8.1.

XML External Entity (XXE) Injection

6.8.1.1.

File Disclosure

6.8.1.2.

6.8.1.3.

Denial of Service

6.8.2.

6.8.3.

XPath Injection

6.9.

Deserialization Vulnerabilities

6.9.1.

Insecure Deserialization

6.9.1.1.

Remote Code Execution

6.9.1.2.

Object Injection

6.9.2.

Language-Specific Issues

6.9.2.1.

Java Deserialization

6.9.2.2.

PHP Object Injection

6.9.2.3.

Python Pickle Vulnerabilities

6.10.

Business Logic Vulnerabilities

6.10.1.

Race Conditions

6.10.1.1.

Time-of-Check Time-of-Use

6.10.1.2.

Concurrent Request Handling

6.10.2.

Price Manipulation

6.10.2.1.

Negative Values

6.10.2.2.

Integer Overflow

6.10.3.

Workflow Bypass

6.10.3.1.

6.10.3.2.

State Manipulation

6.10.4.

Rate Limiting Bypass

6.10.4.1.

6.10.4.2.

Header Manipulation

Previous

5. Reconnaissance and Information Gathering

Go to top

Next

7. Mobile Application Security