> For the complete documentation index, see [llms.txt](https://notes.programmersecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.programmersecurity.com/bug-bounty.md).

# Bug Bounty

- [Bug Bounty Methodology](https://notes.programmersecurity.com/bug-bounty/bug-bounty-methodology.md)
- [XSS](https://notes.programmersecurity.com/bug-bounty/xss.md): Below are the commands and some automation stuff which normally use, some of these i have got from different places like twitter or linkedin
- [SQL Injection](https://notes.programmersecurity.com/bug-bounty/sql-injection.md)
- [Command Injection](https://notes.programmersecurity.com/bug-bounty/command-injection.md)
- [File Upload Pentesting](https://notes.programmersecurity.com/bug-bounty/file-upload-pentesting.md)
- [Local and Remote File Inclusion](https://notes.programmersecurity.com/bug-bounty/local-and-remote-file-inclusion.md)
- [Broken Authentication](https://notes.programmersecurity.com/bug-bounty/broken-authentication.md)
- [Server Side Request Forgery (SSRF)](https://notes.programmersecurity.com/bug-bounty/server-side-request-forgery-ssrf.md)
- [XML External Entity (XXE)](https://notes.programmersecurity.com/bug-bounty/xml-external-entity-xxe.md): XXE happens where we can inject our XML inputs and those inputs are not being sanitized by XML Parser
- [Server Side Template Injection (SSTI)](https://notes.programmersecurity.com/bug-bounty/server-side-template-injection-ssti.md)
- [ReconFTW (six2dez)](https://notes.programmersecurity.com/bug-bounty/reconftw-six2dez.md): ReconFTW is the complete automation process for the bug bounty.It can find you subdomains,fuzzing,nuclei scanning and using more than 20 tools to find vulnerabilites.
- [JS Files](https://notes.programmersecurity.com/bug-bounty/js-files.md)
- [SignUp Page](https://notes.programmersecurity.com/bug-bounty/signup-page.md)