Bug Bounty Notes

Commonly used HTTP methods

• GET - to fetch data
• HEAD - does the same things as get but doesnt show full response
• POST - to create or change data
• PUT - to replace and modify data
• DELETE - to delete data
• OPTIONS - to see communication options

Most Common Response Status Codes

• 200 = Successful
• 300 = Redirects
• 401 = Unauthorized or unauthenticated
• 403 = Forbidden or no access to resource
• 404 = Not found or file doesnt exist
• 405 = HTTP method not allowed
• 505 = Internal error

Open Redirect

Bug Bounty Toolkit

https://github.com/AlexisAhmed/BugBountyToolkit

Bug Bounty Writeup Collection

https://github.com/ngalongc/bug-bounty-reference#readme

All in one Recon Tool

https://github.com/D3Ext/AORT

HowToHunt

https://kathan19.gitbook.io/howtohunt/

Pentration List

https://github.com/AlbusSec/Penetration-List

List of All T00ls

https://medium.com/@chathurangabw/a-curated-list-of-various-bug-bounty-tools-5c5af7e4f301