DOCSEARCHbyAlgolia
Submit Docs

Awesome Bug Bounty Writeups

repository·master·Indexed 26 days ago

https://github.com/devanshbatham/awesome-bugbounty-writeups

A curated collection of high-quality bug bounty writeups categorized by vulnerability type, including XSS, CSRF, SQL injection, SSRF, RCE, and IDOR. The repository provides real-world exploit examples and attack vectors to help security researchers and developers learn from documented vulnerabilities across various platforms.

Tokens
6.2K
Snippets
5
Records
18
Agent score
41%

What's inside awesome-bugbounty-writeups

  1. Browse Bug Bounty Writeups by Vulnerability Type

    master

    This repository provides a curated collection of bug bounty writeups organized by vulnerability category. You can find writeups for the following topics:

    • Cross Site Scripting (XSS)
    • Cross Site Request Forgery (CSRF)
    • Clickjacking (UI Redressing Attack)
    • Local File Inclusion (LFI)
    • Subdomain Takeover
    • Denial of Service (DOS)
    • Authentication Bypass
    • SQL injection
    • Insecure Direct Object Reference (IDOR)
    • 2FA Related issues
    • CORS Related issues
    • Server Side Request Forgery (SSRF)
    • Race Condition
    • Remote Code Execution (RCE)
    • Android Pentesting

  4. Explore Cross Site Scripting (XSS) bug bounty writeups

    master

    This section provides a curated list of real-world bug bounty writeups specifically focused on Cross Site Scripting (XSS) vulnerabilities. These resources cover various XSS types including:

    • Reflected XSS: Payloads injected via URL parameters or form submissions.
    • Stored XSS: Malicious scripts permanently stored on the target server (e.g., in databases, comment sections, or user profiles).
    • DOM-based XSS: Vulnerabilities existing in client-side code rather than server-side code.
    • Blind XSS: A type of stored XSS where the payload is executed in a different part of the application (e.g., an admin dashboard) that the attacker cannot see.
    • Self XSS Escalation: Techniques to turn non-impactful 'Self XSS' into high-impact vulnerabilities like Account Takeover (ATO) or Persistent XSS.
    • Bypass Techniques: Methods for bypassing WAFs (Web Application Firewalls), CSP (Content Security Policy), and character filters.
    • Advanced Chaining: Combining XSS with other vulnerabilities like CSRF, SSRF, or HTTP Smuggling to increase impact.

    Use these writeups to study attack vectors, payload construction, and impact assessment for bug bounty hunting.

  5. Explore Local File Inclusion (LFI) writeups

    master

    Access a collection of bug bounty writeups regarding Local File Inclusion (LFI) and Remote File Inclusion (RFI) vulnerabilities. These resources cover:

    • Escalation Paths: Moving from LFI to Remote Code Execution (RCE) or full server compromise.
    • Real-world Targets: Vulnerabilities found in Google, Apigee, Nokia Maps, and Apache Drill.
    • Attack Chains: Combining LFI with unrestricted file uploads or PHP session manipulation to achieve RCE.

  7. Explore CORS related issue writeups

    master

    Access a collection of writeups detailing Cross-Origin Resource Sharing (CORS) vulnerabilities, including misconfigurations leading to private information disclosure, account takeover, CSRF, and XSS.

    - [CORS bug on google's 404 page (rewarded)](https://medium.com/@jayateerthag/cors-bug-on-googles-404-page-rewarded-2163d58d3c8b)
- [CORS misconfiguration leading to private information disclosure](https://medium.com/@sasaxxx777/cors-misconfiguration-leading-to-private-information-disclosure-3034cfcb4b93)
- [CORS misconfiguration account takeover out of scope to grab items in scope](https://medium.com/@mashoud1122/cors-misconfiguration-account-takeover-out-of-scope-to-grab-items-in-scope-66d9d18c7a46)
- [Chrome CORS](https://blog.bi.tk/chrome-cors/)
- [Bypassing CORS](https://medium.com/@saadahmedx/bypassing-cors-13e46987a45b)
- [CORS to CSRF attack](https://medium.com/@osamaavvan/cors-to-csrf-attack-c33a595d441)
- [An unexploited CORS misconfiguration reflecting further issues](https://smaranchand.com.np/2019/05/an-unexploited-cors-misconfiguration-reflecting-further-issues/)
- [Think outside the scope advanced cors exploitation techniques](https://medium.com/@sandh0t/think-outside-the-scope-advanced-cors-exploitation-techniques-dad019c68397)
- [A simple CORS misconfiguration leaked private post of twitter facebook instagram](https://medium.com/@nahoragg/a-simple-cors-misconfig-leaked-private-post-of-twitter-facebook-instagram-5f1a634feb9d)
- [Explpoiting CORS misconfiguration](https://bugbaba.blogspot.com/2018/02/exploiting-cors-miss-configuration.html)
- [Full account takeover through CORS with connection sockets](https://medium.com/@saamux/full-account-takeover-through-cors-with-connection-sockets-179133384815)
- [Exploiting insecure CORS API api.artsy.net](https://blog.securitybreached.org/2017/10/10/exploiting-insecure-cross-origin-resource-sharing-cors-api-artsy-net)
- [Pre domain wildcard CORS exploitation](https://medium.com/bugbountywriteup/pre-domain-wildcard-cors-exploitation-2d6ac1d4bd30)
- [Exploiting misconfigured CORS on popular BTC site](https://medium.com/@arbazhussain/exploiting-misconfigured-cors-on-popular-btc-site-2aedfff906f6)
- [Abusing CORS for an XSS on flickr](https://whitton.io/articles/abusing-cors-for-an-xss-on-flickr/)

  8. Buffer Overflow Attack Resources

    master

    A curated list of educational resources and writeups regarding buffer overflow vulnerabilities, including:

    • Explanations of stack-based buffer overflow attacks.
    • General guides on how buffer overflow attacks work.
    • Binary exploitation resources.
    • A dedicated GitHub repository for buffer overflow attack practice.

  10. Explore Clickjacking (UI redressing attack) writeups

    master

    Access a collection of bug bounty writeups regarding Clickjacking (UI redressing) attacks. Key topics include:

    • Impactful Exploits: Attacks leading to account takeover or bypassing security controls.
    • Chained Attacks: Combining Clickjacking with XSS or Denial of Service (DoS).
    • Platform-Specific Cases: Vulnerabilities found in Google (Payments, APIs, Docs), Facebook, Instagram, Microsoft Yammer, and more.
    • HTML5 Exploitation: Using HTML5 security features to facilitate clickjacking.