description	Web application hacking resources for OWASP testing, Burp Suite, bug bounty methodology, APIs, OAuth, SQL injection, XSS, WAFs, and web vulnerabilities.

Web App Hacking

Web App Hacking covers methodology, web technologies, web-specific tooling, and application vulnerabilities. Keep general host/port scanning in Red Recon, passive OSINT in Cyber Intelligence, and courses or vulnerable apps in Training.

Web App Testing Resources

{% tabs %} {% tab title="Guides" %}

• OWASP Web Security Testing Guide - Comprehensive guide to testing the security of web applications and web services created by the OWASP foundation.
  • OWASP Top Ten - Guide to the top ten most common vulnerabilities encountered in web app pentesting.
  • OWASP API Security Top 10 - Focuses on the top ten vulnerabilities in API security.
  • OWASP Cryptographic Storage Cheat Sheet - Guidance for protecting stored secrets and sensitive data.
  • OWASP Authorization Cheat Sheet - Guidance for access control and authorization design.
  • CREST OVS Programme - CREST's new application security standard built with OWASP ASVS.
• Hacktricks Web Pentesting Guide - Written by Carlos Polop, the creator of WinPEAS and LinPEAS. Highly recommended resource for creative techniques and tricks.
• The Bug Hunters Methodology - Written by Jason Haddix, this repo details his toolset and methodology for web app penetration testing.
  • Jason's Presentation of TBHM 2.0
  • Updated info of TBHM 4.02
• HowToHunt - Amazing collaborative project documenting testing methodology for different web application vulnerabilities.
• HowToHunt Checklist
• Adarsh's Web Application Penetration Testing Checklist
• Web Checklist by Chintan Gurjar (PDF)
• Mindmap
• Web Penetration Testing Methodology Diagram
• Web Pentest Study Plan {% endtab %}

{% tab title="Resources" %}

Resources

There is a bug bounty focused search engine at BugBountyHunting.com that can point you in the direction of tools, attacks, methodology, writeups, and more.

• Bug Bounty Methodology v1.0
• Bug Bounty Methodology v2.0
• Web Fuzzers Comparison
• Bug Bounty Recon - Scope
• Operator Handbook: Web_Exploit - pg.318 {% endtab %}

{% tab title="Resource Collections" %}

• Awesome Lists Collection: Web Hacking
• Awesome Lists Collection: Web Security
• Awesome Lists Collection: Hacker API Tools
• Awesome Lists Collection: Application Security
• SecLists - The security tester's companion. It's a collection of the multiple types of lists used during security assessments, collected in one place.
• PayloadsAllTheThings - A list of useful payloads and bypasses for Web Application Security and Pentest/CTF.
• InfoSec Reference: Web and Web Applications
• InfoSec Reference: Fuzzing
• Bug Bounty Forum's Tool List
• EdOverflow/bugbounty-cheatsheet
• yasinS/bug-bounty-reference
• Shiva108/Web-CTF-Cheatsheet
• Daniel Meissler's Web Security Testing Resources
• Web App Hacking Research by James Kettle - Everything that isn't posted on PortSwigger.com/research, this site is the blog for the research done by PortSwigger's Head of research, James Kettle.
• Web App Payload Collection
• Web Services Enumeration - Tools and attacks for specific web services. {% endtab %} {% endtabs %}

Bug Bounty

{% tabs %} {% tab title="Platforms" %}

Platforms

• https://www.hackerone.com/
• https://www.bugcrowd.com/
  • CISA Bug Bounty Program
• https://www.synack.com/
• https://cobalt.io/
• https://www.intigriti.com
• https://www.zerocopter.com/
• https://www.yeswehack.com/
• https://www.antihack.me/
• https://securebug.se/
• https://www.openbugbounty.org/
• https://security.apple.com/ {% endtab %}

{% tab title="Resources and Reference" %}

• Methodology
  • theCyberGuy Recon V1.0 - Bug bounty methodology mind map.
  • Creating the perfect bug bounty automation - Detectify/Hakluke automation writeup.
• Resource collections
  • awesome-bug-bounty - is a comprehensive curated list of available Bug Bounty.
• Firebounty — Bug bounty search engine
• Write-up tools
  • Bug Bounty Reconnaissance Framework (BBRF)
    • https://github.com/honoki/bbrf-client
    • https://github.com/honoki/bbrf-server
    • https://honoki.net/2020/10/08/introducing-bbrf-yet-another-bug-bounty-reconnaissance-framework/
• Write-ups and Scopes
  • Awesome-Bugbounty-Writeups - is a curated list of bugbounty writeups.
  • bounty-targets-data - Hourly-updated data dumps of in-scope bug bounty targets from HackerOne, Bugcrowd, Intigriti, and others.
  • bug-bounty-reference - is a list of bug bounty write-ups.
  • Bug bounty writeups - Historical bug bounty writeup index from 2012-2020. {% endtab %} {% endtabs %}

Web Technologies

{% content-ref url="web-technologies/" %} web-technologies {% endcontent-ref %}

Attacks and Vulnerabilities

{% content-ref url="attacks-and-vulnerabilities/" %} attacks-and-vulnerabilities {% endcontent-ref %}

Training and Resources

Courses, books, CTFs, and vulnerable training apps are maintained in Training.

{% content-ref url="../training/" %} training {% endcontent-ref %}