PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Parameter Discovery: A quick guide to start

yeswehack.com | blog | #bug-bounty | #attack-surface | #reconnaissance | #web-security | #tools | #bug-hunting | #parameter-discovery | #arjun
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A quick-start guide to parameter discovery: why hidden or unlinked parameters matter for attack surface mapping, and how to hunt them with tools like Arjun, ParamSpider and Param-Miner.
Published
Collected

Related coverage

blog · netlas.io
Bug Bounty 101: Top 10 Reconnaissance Tools
A rundown of the top reconnaissance tools for bug bounty hunters, covering asset discovery, OSINT, automation and vulnerability research, and how each fits into a typical hunting workflow.
blog · netlas.io
Nmap Cheat Sheet: Top 10 Scan Techiques
A practical Nmap cheat sheet covering the ten most useful scan techniques — ping, SYN, UDP, version and OS detection and more — with tips on scope, timing and output options.
blog · netlas.io
theHarvester: a Classic Open Source Intelligence Tool
A practical guide to theHarvester: the classic open-source OSINT tool for gathering emails, subdomains and hostnames, its passive and active data sources, and real-world uses.
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
Back