# Bug Bounty Methodology

**URL:** <https://onehack.st/t/bug-bounty-methodology/287085>\
**Category:** Tools & Scripts\
**Tags:** hacking, tips-tricks\
**Created:** [July 16, 2024, 8:08pm UTC](https://onehack.st/t/bug-bounty-methodology/287085 "2024-07-16T20:08:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [July 16, 2024, 8:08pm UTC](https://onehack.st/t/bug-bounty-methodology/287085/1 "2024-07-16T20:08:25Z")

</div>

![Bug-Bounty-Program-Year-in-Review_Header](https://onehack.st/uploads/default/original/3X/4/9/49c77085d82851ae4c27b86d2afaf7b52401e0f3.jpeg)

# Bug-Bounty-Methodology

These are my checklists which I use during my bug bounty hunting.

[![](https://camo.githubusercontent.com/3db6324e903bc589ab9b9d50445496968d0684c9b5e5e5813738c764089aa645/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6973737565732f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779)](https://camo.githubusercontent.com/3db6324e903bc589ab9b9d50445496968d0684c9b5e5e5813738c764089aa645/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6973737565732f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779) [![](https://camo.githubusercontent.com/1e61e73c45a8adddbb111652b6b013fa0e0aaa416f933c236c33842c5a841e15/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f666f726b732f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779)](https://camo.githubusercontent.com/1e61e73c45a8adddbb111652b6b013fa0e0aaa416f933c236c33842c5a841e15/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f666f726b732f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779) [![](https://camo.githubusercontent.com/55626b446b470f26d7a64b14697b9e64195404ae019bc6cad4d628b5558c7138/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779)](https://camo.githubusercontent.com/55626b446b470f26d7a64b14697b9e64195404ae019bc6cad4d628b5558c7138/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779) [![](https://camo.githubusercontent.com/38fc23dad9c902adc85c355ae1712e24618e06b951fdff40e0e953a89525ff62/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6173742d636f6d6d69742f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779)](https://camo.githubusercontent.com/38fc23dad9c902adc85c355ae1712e24618e06b951fdff40e0e953a89525ff62/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6173742d636f6d6d69742f747568696e313732392f4275672d426f756e74792d4d6574686f646f6c6f6779)

## List

- [Testing 2 Factor Authentication](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/2FA.md)
- [Captcha Bypass](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/Captcha.md)
- [Bypassing CSRF Protection](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/CSRF.md)
- [Testing Password Reset Functionality](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/PasswordReset.md)
- [Bypassing Rate Limit Protection](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/RateLimit.md)
- [JWT Misconfiguration](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/JWT.md)
- [Abusing Support Portal](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/AbusingSupportPortal.md)
- [Application Level Dos](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/Dos.md)
- [OAuth Misconfiguration](https://github.com/tuhin1729/Bug-Bounty-Methodology/blob/main/OAuthMisconfiguration.md)

## GitHub:

> **[GitHub - tuhin1729/Bug-Bounty-Methodology: These are my checklists which I use during my...](https://github.com/tuhin1729/Bug-Bounty-Methodology)**
>
> These are my checklists which I use during my hunting.

---

<div class="post-metadata">

**Author:** ![sfhussain8](https://onehack.st/letter_avatar_proxy/v4/letter/s/48db29/32.png) [@sfhussain8](https://onehack.st/u/sfhussain8)\
**Post date:** [July 16, 2024, 10:48pm UTC](https://onehack.st/t/bug-bounty-methodology/287085/2 "2024-07-16T22:48:23Z")

</div>

Very pragmatic. Probability of a potential to succeed is very likely. Have to hunt for right bakra to hunt 🙂

Tan Q

---

<div class="post-metadata">

**Author:** ![leejiacheng1](https://onehack.st/user_avatar/onehack.st/leejiacheng1/32/94426_2.png) [@leejiacheng1](https://onehack.st/u/leejiacheng1)\
**Post date:** [July 16, 2024, 11:43pm UTC](https://onehack.st/t/bug-bounty-methodology/287085/3 "2024-07-16T23:43:15Z")

</div>

Thanks for this info 👍