HowToHunt: Practical Methodologies and Test Cases for Web Vulnerability Hunting

HowToHunt is a community-driven repository and GitBook documenting practical methodologies, step-by-step test cases, and attack vectors for web vulnerability hunting. It covers over 20 vulnerability categories including XSS, SSRF, IDOR, SQL injection, CORS, XXE, subdomain takeover, and WAF bypasses.

Consolidates battle-tested bug bounty hunting checklists and methodologies into structured, actionable guides for security researchers and penetration testers.