jhaddix/tbhm

jhaddix/tbhm has 4,424 GitHub stars and 827 forks. GitHot measured 0 stars in 24 hours. Last checked 2026-11-06 16:52 UTC. Last push 2023-08-01.

How these counts are measured

The Bug Hunters Methodology

4,424 stars 827 forks

Measured star growth

in 24h: 0
in 7 days: Collecting history
in 15 days: Collecting history
in 1 month: Collecting history

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

README.md

The Bug Hunter's Methodology (TBHM)

Welcome! This repo is a collection of

tips
tricks
tools
data analysis
and notes

related to web application security assessments and more specifically towards bug hunting in bug bounties.

The current sections are divided as follows:

Before You Get Hacking

Reconassiance

Application Analysis

Mapping
Authorization and Sessions
Tactical fuzzing
- XSS
- SQLi
- File Inclusion
- CSRF
Privilege, Transport and Logic
Web services
Mobile vulnerabilities

Other

Auxiliary Information

The goal of the project is to incorporate more up to date resources for bug hunters and web hackers to use during thier day-to-day work.

@jhaddix

History

Title	Conference	Version	Link
How to Shot Web	Defcon 23	1.0	Link
The Bug Hunter's Methodology	xxx	xxx	Link
The Bug Hunter's Methodology	xxx	xxx	Link
The Bug Hunter's Methodology	xxx	xxx	Link
The Bug Hunter's Methodology	xxx	xxx	Link

Explore related projects

codecrafters-io/build-your-own-x

Master programming by recreating your favorite technologies from scratch.

public-apis/public-apis

A collective list of free APIs

morluto/rea

Reverse engineer anything with agents, from app behavior down to native binaries.

openclaw/openclaw

The AI that really does things. Any OS. Any Platform. The lobster way. 🦞