# The Complete Bug Bounty Cheat Sheet ⭐ **URL:** \ **Category:** Give-Away and Freebies\ **Tags:** freebies, gaming\ **Created:** [August 12, 2021, 10:36pm UTC](https://onehack.st/t/the-complete-bug-bounty-cheat-sheet/197438 "2021-08-12T22:36:43Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [August 12, 2021, 10:36pm UTC](https://onehack.st/t/the-complete-bug-bounty-cheat-sheet/197438/1 "2021-08-12T22:36:43Z")
![image](https://onehack.st/uploads/default/original/3X/2/e/2ed7d704b7c28f3fc29b9b031e4063bb65290904.jpeg) # Complete Bug Bounty Cheat Sheet XSS [https://github.com/E…atsheets/xss.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md) [https://github.com/i…ss-payload-list](https://github.com/ismailtasdelen/xss-payload-list) SQLi [https://github.com/E…tsheets/sqli.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md) SSRF [https://github.com/E…tsheets/ssrf.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md) [https://github.com/s…Request Forgery](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery) CRLF [https://github.com/E…tsheets/crlf.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md) [https://github.com/s…/CRLF Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection) CSV-Injection [https://github.com/E…sv-injection.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md) [https://github.com/s…r/CSV Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection) Command Injection [https://github.com/s…mmand Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection) Directory Traversal [https://github.com/s…ctory Traversal](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal) LFI [https://github.com/E…atsheets/lfi.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md) [https://github.com/s…/File Inclusion](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion) XXE [https://github.com/E…atsheets/xxe.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md) Open-Redirect [https://github.com/E…pen-redirect.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md) RCE [https://github.com/E…atsheets/rce.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md) Crypto [https://github.com/E…heets/crypto.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md) Template Injection [https://github.com/E…te-injection.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md) [https://github.com/s…plate Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection) XSLT [https://github.com/E…tsheets/xslt.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md) Content Injection [https://github.com/E…nt-injection.md](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md) LDAP Injection [https://github.com/s…/LDAP Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection) NoSQL Injection [https://github.com/s…NoSQL Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection) CSRF Injection [https://github.com/s…/CSRF Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection) GraphQL Injection [https://github.com/s…aphQL Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection) IDOR [https://github.com/s…ject References](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References) ISCM [https://github.com/s…Code Management](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management) LaTex Injection [https://github.com/s…LaTeX Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection) OAuth [https://github.com/s…ee/master/OAuth](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth) XPATH Injection [https://github.com/s…XPATH Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection) Bypass Upload Tricky [https://github.com/s… Insecure Files](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files) # ENJOY & HAPPY LEARNING! ❤ ![](https://i.ibb.co/rwpPJZy/Leechers.gif) ---
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [August 12, 2021, 10:46pm UTC](https://onehack.st/t/the-complete-bug-bounty-cheat-sheet/197438/2 "2021-08-12T22:46:20Z")
---
**Author:** ![Darth\_Vader](https://onehack.st/user_avatar/onehack.st/darth_vader/32/97002_2.png) [@Darth\_Vader](https://onehack.st/u/Darth_Vader)\ **Post date:** [August 13, 2021, 3:52am UTC](https://onehack.st/t/the-complete-bug-bounty-cheat-sheet/197438/3 "2021-08-13T03:52:16Z")
SaM once again with a HQ post. I’m confused as to how you find these. BOOKMARKED 🔖 ---
**Author:** ![quick-learner](https://onehack.st/user_avatar/onehack.st/quick-learner/32/43997_2.png) [@quick-learner](https://onehack.st/u/quick-learner)\ **Post date:** [August 13, 2021, 11:00am UTC](https://onehack.st/t/the-complete-bug-bounty-cheat-sheet/197438/4 "2021-08-13T11:00:17Z")
thanks for again quality post