discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens

EdOverflow/bugbounty-cheatsheet · source

Snapshot 0 · 2026-11-04T12:47:24Z · · CC-BY-SA-4.0

GitHub description at capture

A list of interesting payloads, tips and tricks for bug bounty hunters.

README at capture

# Bug Bounty Cheat Sheet</h1>

| 📚 Reference                                                | 🔎 Vulnerabilities                                        | 
|-------------------------------------------------------------|-----------------------------------------------------------| 
| [Bug Bounty Platforms](cheatsheets/bugbountyplatforms.md)   | [XSS](cheatsheets/xss.md)                               | 
| [Books](cheatsheets/books.md)                               | [SQLi](cheatsheets/sqli.md)                             | 
| [Special Tools](cheatsheets/special-tools.md)               | [SSRF](cheatsheets/ssrf.md)                             | 
| [Recon](cheatsheets/recon.md)                               | [CRLF Injection](cheatsheets/crlf.md)                   | 
| [Practice Platforms](cheatsheets/practice-platforms.md)     | [CSV Injection](cheatsheets/csv-injection.md)           | 
| [Bug Bounty Tips](cheatsheets/bugbountytips.md)             | [LFI](cheatsheets/lfi.md)                               | 
|                                                             | [XXE](cheatsheets/xxe.md)                               | 
|                                                             | [RCE](cheatsheets/rce.md)                               | 
|                                                             | [Open Redirect](cheatsheets/open-redirect.md)           | 
|                                                             | [Crypto](cheatsheets/crypto.md)                         | 
|                                                             | [Template Injection](cheatsheets/template-injection.md) | 
|                                                             | [Content Injection](cheatsheets/content-injection.md)   | 
|                                                             | [XSLT Injection](cheatsheets/xslt.md)                   | 

# Contributing

We welcome contributions from the public.

### Using the issue tracker 💡

The issue tracker is the preferred channel for bug reports and features requests. [![GitHub issues](https://img.shields.io/github/issues/EdOverflow/bugbounty-cheatsheet.svg?style=flat-square)](https://github.com/EdOverflow/bugbounty-cheatsheet/issues)

### Issues and labels 🏷

Our bug tracker utilizes several labels to help organize and identify issues.

### Guidelines for bug reports 🐛

Use the GitHub issue search — check if the issue has already been reported.

# Style Guide

We like to keep our Markdown files as uniform as possible. So if you submit a PR, make sure to follow this style guide (we will not be angry if you do not).

- Cheat sheet titles should start with `##`.
- Subheadings should be made bold. (`**Subheading**`)
- Add newlines after subheadings and code blocks.
- Code blocks should use three backticks. (```)
- Make sure to use syntax highlighting whenever possible.

# Contributors

- [EdOverflow](https://github.com/EdOverflow)
- [GerbenJavado](https://github.com/GerbenJavado)
- [jon_bottarini](https://github.com/BlueTower)
- [sp1d3r](https://github.com/sp1d3r)
- [yasinS](https://github.com/yasinS)
- [neutrinoguy](https://github.com/neutrinoguy)
- [kuromatae](https://github.com/kuromatae)
- [And many more ...](https://github.com/EdOverflow/bugbounty-cheatsheet/graphs/contributors)