✅Bug Bounty Checklist 1

this checklist is not mine.This was a LinkedIn post and I forgot the author of this. All credits will go for the original author.

"This Is What he do when he hunt:

• Find Subdomains

• Check CNAME Records of Those Subdomains, Check for SubD Takeover. Use WaybackUrls for URLS

• Use MassScan For Port Scanning

• Do Github Recon

On WebApp

• Check For CORS Misconfiguration

• Check For Email Header Injection On Reset Password Function.

• Check For SMTP and HOST Header Injection.

• Check For IFRAME (For Clickjacking)

• Check For Improper Access Control and Parameter Tampering.

• Check Burp History for finding endpoint.

• Use Arjun for finding hidden endpoints.

• Check For CSRF

• Check For SSRF Parameters.

• Check For XSS and SSTI.

• Check Cryptography in Reset Password Token.

• Check For Unicode Injection In Email Parameter

• Check For Bypassing Rate Limit Headers: X-Originating-IP: IP X-Forwarded-For: IP X-Remote-IP: IP X-Remote-Addr: IP X-Client-IP: IP X-Forwarded-Host: IP

• Directory Brute Force

• Check For HTTP Request Smuggling.

• Check For Open Redirect Through WaybackURLs

• Check For Social-Signon Bypass

• Check For State Parameter in Social Sign-In & Check Whether its possible to cause DoS using multiple cookies injection.

• File-Upload ,CSRF, XSS, SSRF, RCE, LFI, XXE

• Buffer Overflow"