H1报告
https://hackerone.com/reports/1624140
https://hackerone.com/reports/1626226
Top 25 Server-Side Request Forgery (SSRF) Bug Bounty Reports
https://hackerinthehouse.in/top-25-server-side-request-forgery-ssrf-bug-bounty-reports/
How to Report and Find the HTML injection vulnerability on Bug crowd
https://www.youtube.com/watch?v=VwFsC1dX3W8&feature=youtu.be
TWO LINES OF JSCRIPT FOR $20,000 – PWN2OWN MIAMI 2022
https://trenchant.io/two-lines-of-jscript-for-20000-pwn2own-miami-2022/
Write-up: Infinite money logic flaw @ PortSwigger Academy
https://infosecwriteups.com/write-up-infinite-money-logic-flaw-portswigger-academy-5b6182f42f57
2FA Bypass Technique
Finding XSS using KnoXSS API
echo "domain" | subfinder -silent | gauplus | grep "=" | uro | gf xss | awk '{ print "curl https://knoxss[.]me/api/v3 -d "target="$1 "" -H "X-API-KEY: APIKNOXSS""}' | sh前两天发的太多了，今天及以后会控制在10之内，避免出现头秃学不过来的情况：）
原文始发于微信公众号（Bug Bounty Tips）：Bug Bounty Tips（2022-10-15）
