Nytro Posted October 27, 2015 Report Share Posted October 27, 2015 [h=1]The Bug Hunters Methodology[/h] Welcome! This repo is a conglomeration of tips, tricks, tools, and data analysis to use while doing web application security assessments, and more specifically towards bug hunting in bug bounties. These methodology pieces are presented as an abbreviated testing methodology for use in bug bounties. It is based off of the research gathered for the Defcon 23 talk "How to shot Web: better hacking in 2015". The current sections are divided as follows:philosophydiscoverymappingtactical fuzzingXSSSQLiLFICSRFweb servicesmobile vulnerabilities The goal of the project is to incorporate more up to date resources for bug hunters and web hackers to use during thier day-to-day work. @jhaddix [h=2]Defcon Video[/h]Link: https://drive.google.com/file/d/0B15XPa08CyxhQ1J2T2tOUUJuSFk/viewSursa: https://github.com/jhaddix/tbhm 1 Quote Link to comment Share on other sites More sharing options...
