Bug Bounty Hunting Essentials

Points of interest

It is necessary to map the application entirely to look for vulnerabilities. Specifically, for application logic bugs, it is necessary to put effort into the following special zones when there is more interaction:

• Forms: It is not with the approach to inject something into the fields, but in order to understand what is happening with the data that is entered. Is it processed? Is it stored? Is it used by a service? Is this service internal or external? Is it processed by other applications? Ask yourself these questions when analyzing forms.
• User registration: One of the important sections is to look at whatever is related with user management. Try to understand how the application registers the users, how it determines ...