Mind-Maps - Mindmaps for bug bounty Hunters🧑‍🦰, pentesters🧑‍🦰

项目说明

MindMaps 🗺️

> This repository stores and houses Mindmaps for bug bounty Hunters🧑‍🦰, pentesters🧑‍🦰 and offensive(🔴)/defensive(🔵) security Professionals🫂 provided by me as well as contributed by the community🧑🏻‍🤝‍🧑🏽. Your contributions and suggestions are welcomed.

| Name | Link | Type | Description | Author |
| ----------------------------------------------- | ------------------------------------------------------------ | ------ | ------------------------------------------------------------ | --------------------------------------------------- |
| Bug Hunters Methodology | 🔗 | 🔴 | This Mindmap explains how to test for bugs on Bug bounty programs | Jhaddix |
| Fiding Server side issues | 🔗 | 🔴 | This mind-map explains how to look for server side issues on your bug-bounty/pentest targets | Imran parray |
| Ja Recon | 🔗 | 🔴 | How to perform recon on Ja files | Imran parray |
| My Recon | 🔗 | 🔴 | This mind-map explains how to look for server side and client side bugs on Bug bounty programs | Imran parray |
| Testing 2FA | 🔗 | 🔴 | How to test 2FA for Bugs | hackerscrolls |
| Testing 2FA [2] | 🔗%20-%20hackerscroll/Testing%202FA.jpeg) | 🔴 | How to test 2FA for Bugs | hackerscrolls |
| 2FA Bypass Techniques | 🔗 | 🔴 | 2FA Bypass Techniques | Harsh Bothra |
| Android Attacker | 🔗 | 🔴 | Detailed Mindmap on How to find and exploit Android bugs. | hackerscrolls |
| Testing oAuth for | 🔗 | 🔴 | How to test Oauth for Bugs | hackerscrolls |
| Security Assesment Mindmap | 🔗 | 🔴 | General security Assessment Mind-map | Sopas |
| Red Teaming Mind Map from The Hacker Playbook 3 | 🔗 | 🔴 | Mind-map containing several techniques and approaches used by Red team members | Marcon Lencini |
| SSRF MindMap | 🔗 | 🔴 | How to test SSRF for Bugs | hackerscrolls |
| Code Review Mindmap | 🔗 | 🔴🔵 | Mindmap containing several techniques and approaches that can be used during code reviews. | www.amanhardikar.com |
| Android Application Penetration Testing Mindmap| 🔗 | 🔴 | A simple mind-map which explains test cases around Android Application Penetration Testing | Harsh Bothra |
| Cookie Based Authentication | 🔗 | 🔴 | a comprehensi which includes techniques to test Cookie based authentication mechanism. | Harsh Bothra |
| Tesing JIRA for CVE's | 🔗 | 🔴 | Detailed Mind-map on How to find and exploit JIRA CVE's. | Harsh Bothra |
| Scope Based Testing | 🔗 | 🔴 | This Mind-map explains how to test for bugs based on the scope of your target. | Harsh Bothra |
| OAuth 2.0 Threat Model Pentesting Checklist| 🔗 | 🔴 | The following checklist represents a simplified alternative to IETF OAuth 2.0 Security Best Current Practice publication combined with other public resources we found usefull.| Binary Brotherhood |
|Bug Bounty Platforms |🔗| 🔴 | list of bug bounty platform a | fujie gu |
|Web App Pentest|🔗|🔴|Web application Pentest Mindmap|Ding Jayway|
|Web App Pentest|🔗|🔴|This mind-map has the list of bugs and the corresponding tools and techniques used to find those bugs|Ninad Mathpati|
|Mobile Security Mindmap|🔗|🔴|a comprehensi which includes techniques to test Mobile Application for security issues|Aman Hardikar|
|Web Security Field Mindmap|🔗|🔴🔵|This mindmap is an combination of Web Attacks, AppSec and Bug Bounty stuff|jois|
|Security Consulting & Implementation|🔗|🔵|Security Consulting & Implementation mindmap|Lawrence Pingree|
|Information Security Technologies & Markets|🔗|🔴🔵|This Mindmap is an combination of Information Security Technologies & Markets|ovens ffdf|
|Information Security Technologies & Markets|🔗|🔴🔵|This mindmap contains different Information Security Technologies & Markets|John Fortner|
|Nmap Scans Mindmap|🔗|🔴🔵|This mindmap show how different type of scans can be performed via Nmap Scanner|Only Hacker|
|Cross Site Request Frogery Mindmap|🔗|🔴🔵|This mindmap show how different type of security tests can be performed while testing CSRF|alexlauerman|
|Access Control | 🔗 | 🔴 | List of Techniques that can be use to test access control models of an Application| Pratik Gaikwad |
|CISO MindMap 2021| 🔗 | 🔵 | is the latest and updated CISO MindMap for 2021 with a number of updates and new recommendations for 2021-22| Rafeeq Rehman |
| Common on Forgot Password Functionality | 🔗 | 🔴 | List of Test cases that can be perform on an Forgot password functionalities within the web apps| Harsh Bothra |
| Common XML Attacks | 🔗 | 🔴 | In this Mindmap Harsh Bothra Tired to list all the attacks that can be performed on an XML endpoints/services | Harsh Bothra |
| Copy of Checklist for SAML | 🔗 | 🔴 | List of all the that can be tested on SAML Endpoints/Services | Harsh Bothra |
| Exploting Grafana | 🔗 | 🔴 | Possible test cases to Exploit Publicly A Grafa Instance | Muhammad Daffa |
| FILE READ | 🔗 | 🔴 | Practical strategies for exploiting FILE READ | Lukasz Mikuła |
|The Cyber Guy - Recon|🔗|🔴|in this mindmap the CyberGuy shares his Recon Methodology|theCyberGuy0|
|Penetration Testing Certifications|🔗|🔴🔵|in this mindmap Tahar Tries to uncover the list of Certification in the field of Penetration testing|MrTaharAmine|
|Linux Pri Escalation |🔗|🔴|this mindmap shows several linux pri escalation Techniques|Source|

---

Special Thanks to all the authors for publishing these mindmaps 🥳🥳🥳

项目信息

开发语言：未知

Star 数：7

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Mindmaps for bug bounty Hunters🧑‍🦰, pentesters🧑‍🦰 and offensive(🔴)/defensive(🔵) security Professionals🫂展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。