> For the complete documentation index, see [llms.txt](https://oreobiscuit.gitbook.io/introduction/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oreobiscuit.gitbook.io/introduction/bug-bounty-reports-and-articles/index.md).

# Index

### Here is the **Comprehensive  Bug Type List:**

1. Takeover's (Accounts, Sub-domains, etc)
2. IDOR (Indirect Object Reference) 
3. Leaks & Disclosure (PII, API Key, etc)
4. Open Redirects
5. Request Forgery (CSRF & SSRF)
6. Injections (HTML, XSS)
7. Broken Access Control & Broken Authentication
8. Web Socket
9. Miscellaneous Reports

***

### Here are some excellent websites which publish InfoSec articles

| Website Name                | URL                                          |
| --------------------------- | -------------------------------------------- |
| Weekly Infosec Writeups     | <https://weekly.infosecwriteups.com/>        |
| Evan Connelly's Blog        | <https://evanconnelly.github.io/>            |
| Embrace The Red Blog        | <https://embracethered.com/blog/index.html>  |
| Bug Bounty Hunter Disclosed | <https://www.bugbountyhunter.com/disclosed/> |
| Chybeta's Blog              | <https://chybeta.github.io/>                 |
| Infosec Writeups            | <https://infosecwriteups.com/>               |
| Writeups.io                 | <https://writeups.io/>                       |
| Pentester Land Writeups     | <https://pentester.land/writeups/>           |
| Bug Bounty Hunting          | <https://www.bugbountyhunting.com/>          |

***

{% content-ref url="/pages/9h50SufbxKuYiQolqETZ" %}
[Takeover's (Accounts, Sub-domains, etc)](/introduction/bug-bounty-reports-and-articles/takeovers-accounts-sub-domains-etc.md)
{% endcontent-ref %}

{% content-ref url="/pages/R7e6JgA7x013L9BbZ84C" %}
[IDOR (Indirect Object Reference)](/introduction/bug-bounty-reports-and-articles/idor-indirect-object-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/UyQUjsTbPkr18hIlIrY9" %}
[Leaks & Disclosure (PII, API Key, etc)](/introduction/bug-bounty-reports-and-articles/leaks-and-disclosure-pii-api-key-etc.md)
{% endcontent-ref %}

{% content-ref url="/pages/ow9NPuroTCvhVYMeBdCt" %}
[Open Redirects](/introduction/bug-bounty-reports-and-articles/open-redirects.md)
{% endcontent-ref %}

{% content-ref url="/pages/hYZppgM445QAtsDpmxzu" %}
[Request Forgery (CSRF & SSRF)](/introduction/bug-bounty-reports-and-articles/request-forgery-csrf-and-ssrf.md)
{% endcontent-ref %}

{% content-ref url="/pages/vvOTaQXYVQROGc9qE5zz" %}
[Injections (HTML, XSS, etc)](/introduction/bug-bounty-reports-and-articles/injections-html-xss-etc.md)
{% endcontent-ref %}

{% content-ref url="/pages/ftXdB3CREb2sTwTUVPd6" %}
[Broken Access Control & Broken Authentication](/introduction/bug-bounty-reports-and-articles/broken-access-control-and-broken-authentication.md)
{% endcontent-ref %}

{% content-ref url="/pages/AUB3UkqXzI41ypxvhE2o" %}
[Web Socket](/introduction/bug-bounty-reports-and-articles/web-socket.md)
{% endcontent-ref %}

{% content-ref url="/pages/jd1xoRsm7wDtJXeyvBui" %}
[Miscellaneous Reports](/introduction/bug-bounty-reports-and-articles/miscellaneous-reports.md)
{% endcontent-ref %}