OTaKuHP

Bug Bounty Checklist and Cheatsheets

WAPT-https://github.com/KathanP19/HowToHunt/blob/master/CheckList/Web_Checklist_by_Chintan_Gurjar.pdf

Authenication-https://github.com/HolyBugx/HolyTips/blob/main/Checklist/Authentication.pdf

Oauth Misconfiguration-https://binarybrotherhood.io/oauth2_threat_model.html

File Upload-https://github.com/HolyBugx/HolyTips/blob/main/Checklist/File%20Upload.pdf

OTaKuHP

Mobile Pentesting Resources

https://youtube.com/playlist?list=PLY47jY-dcCPXA-IAXaP92FZIkp75fUVfo

https://xmind.net/m/GkgaYH/

https://iamsarvagyaa.github.io/android-security-part-one/

https://hacker101.com/sessions/android-hacking-b3nac.html

OTaKuHP

Pentesting Learning Resources

学习网站

www.symbo1.com

https://github.com/phith0n

https://www.leavesongs.com/

Webshells

OTaKuHP

layout	title
post	xss cheat sheet

# xss-cheat-sheet

# Basics Xss

HTML Context - Simple Tag Injection

OTaKuHP

Bug Bounty payloads github Repos List:

PayloadsAllTheThings - https://lnkd.in/gjTPbtz

cujanovic - https://lnkd.in/gSTJQN4

Payload Box (cmdi , sqli , xss , lfi , rfi etc) - https://lnkd.in/g6B28dU

SecLists - https://lnkd.in/g6ucAZQ

OTaKuHP

webapp pentest path yt videos

• Phase 1 – History

1. History of Internet - https://www.youtube.com/watch?v=9hIQjrMHTv4

• Phase 2 – Web and Server Technology

2. Basic concepts of web applications, how they work and the HTTP protocol - https://www.youtube.com/watch?v=RsQ1tFLwldY&t=7s
3. HTML basics part 1 - https://www.youtube.com/watch?v=p6fRBGI_BY0
4. HTML basics part 2 - https://www.youtube.com/watch?v=Zs6lzuBVK2w

OTaKuHP

SAST Tools

Curated list of security tools

💰 - Commercial Tool

Secrets Detection

Proactive