---
description: >-
  Here I Document all the Bug Bounty Reports & Articles I read and my daily
  Source of Articles. This list includes various type of Bugs, Each Bug category
  have many Reports to read and learn.
---

# Index

### Here is the **Comprehensive  Bug Type List:**

1. Takeover's (Accounts, Sub-domains, etc)
2. IDOR (Indirect Object Reference)&#x20;
3. Leaks & Disclosure (PII, API Key, etc)
4. Open Redirects
5. Request Forgery (CSRF & SSRF)
6. Injections (HTML, XSS)
7. Broken Access Control & Broken Authentication
8. Web Socket
9. Miscellaneous Reports



***

### Here are some excellent websites which publish InfoSec articles

| Website Name                | URL                                                                                      |
| --------------------------- | ---------------------------------------------------------------------------------------- |
| Weekly Infosec Writeups     | [https://weekly.infosecwriteups.com/](https://weekly.infosecwriteups.com/)               |
| Evan Connelly's Blog        | [https://evanconnelly.github.io/](https://evanconnelly.github.io/)                       |
| Embrace The Red Blog        | [https://embracethered.com/blog/index.html](https://embracethered.com/blog/index.html)   |
| Bug Bounty Hunter Disclosed | [https://www.bugbountyhunter.com/disclosed/](https://www.bugbountyhunter.com/disclosed/) |
| Chybeta's Blog              | [https://chybeta.github.io/](https://chybeta.github.io/)                                 |
| Infosec Writeups            | [https://infosecwriteups.com/](https://infosecwriteups.com/)                             |
| Writeups.io                 | [https://writeups.io/](https://writeups.io/)                                             |
| Pentester Land Writeups     | [https://pentester.land/writeups/](https://pentester.land/writeups/)                     |
| Bug Bounty Hunting          | [https://www.bugbountyhunting.com/](https://www.bugbountyhunting.com/)                   |

***



{% content-ref url="takeovers-accounts-sub-domains-etc" %}
[takeovers-accounts-sub-domains-etc](takeovers-accounts-sub-domains-etc)
{% endcontent-ref %}

{% content-ref url="idor-indirect-object-reference" %}
[idor-indirect-object-reference](idor-indirect-object-reference)
{% endcontent-ref %}

{% content-ref url="leaks-and-disclosure-pii-api-key-etc" %}
[leaks-and-disclosure-pii-api-key-etc](leaks-and-disclosure-pii-api-key-etc)
{% endcontent-ref %}

{% content-ref url="open-redirects" %}
[open-redirects](open-redirects)
{% endcontent-ref %}

{% content-ref url="request-forgery-csrf-and-ssrf" %}
[request-forgery-csrf-and-ssrf](request-forgery-csrf-and-ssrf)
{% endcontent-ref %}

{% content-ref url="injections-html-xss-etc" %}
[injections-html-xss-etc](injections-html-xss-etc)
{% endcontent-ref %}

{% content-ref url="broken-access-control-and-broken-authentication" %}
[broken-access-control-and-broken-authentication](broken-access-control-and-broken-authentication)
{% endcontent-ref %}

{% content-ref url="web-socket" %}
[web-socket](web-socket)
{% endcontent-ref %}

{% content-ref url="miscellaneous-reports" %}
[miscellaneous-reports](miscellaneous-reports)
{% endcontent-ref %}
