BUG BOUNTY
┃
┣ Recon
┃ ┣ Subdomain Enumeration
┃ ┣ Asset Discovery
┃ ┣ Port Scanning
┃ ┣ HTTP Probing
┃ ┣ DNS Enumeration
┃ ┗ Tech Detection
┃
┣ Web
┃ ┣ IDOR
┃ ┣ XSS
┃ ┣ SSRF
┃ ┣ SQLi
┃ ┣ CSRF
┃ ┣ SSTI
┃ ┗ File Upload
┃
┣ API
┃ ┣ API Discovery
┃ ┣ BOLA
┃ ┣ Authentication
┃ ┣ Authorization
┃ ┣ Rate Limiting
┃ ┗ Mass Assignment
┃
┣ Auth
┃ ┣ OAuth
┃ ┣ JWT
┃ ┣ Sessions
┃ ┣ MFA
┃ ┗ Account Takeover
┃
┣ Automation
┃ ┣ Recon Automation
┃ ┣ Nuclei
┃ ┣ Custom Scripts
┃ ┣ Asset Monitoring
┃ ┗ Workflow Orchestration
┃
┣ Burp Suite
┃ ┣ Proxy
┃ ┣ Repeater
┃ ┣ Intruder
┃ ┣ Extensions
┃ ┗ Match & Replace
┃
┣ Cloud
┃ ┣ AWS
┃ ┣ Azure
┃ ┣ GCP
┃ ┣ S3
┃ ┗ Misconfigurations
┃
┣ Reporting
┃ ┣ Validation
┃ ┣ PoC
┃ ┣ Impact
┃ ┣ Severity
┃ ┗ Report Writing
┃
┗ Growth
┣ Writeups
┣ CVE Research
┣ New Attack Surfaces
┣ Workflow Optimization
┗ Continuous Learning
6August 26, 2026 463 30
