kathanp19/howtohunt

HowToHunt is a community-built collection of guides for finding security vulnerabilities in web applications. The project is aimed at bug bounty hunters, a term for people who look for security flaws in software on behalf of the company that built it, often for a cash reward. More than 72 contributors have written guides based on techniques they have used in actual bug bounty programs. Bug bounty hunting is a recognized way to practice and profit from security research. Web applications commonly contain classes of vulnerabilities with well-known names. Guides in this repository walk through the methodology for finding each type, covering what to look for, what tools to use, and what steps to follow. The focus is on practical, step-by-step instructions rather than theory. The content is organized into category folders and is also available on a GitBook site, which provides a searchable, formatted reading experience outside of GitHub. The repository itself does not contain runnable code, it is a collection of written guides, methodologies, and references to external tools and write-ups. Anyone wanting to add their own technique can fork the repository, add a guide in the appropriate folder, and open a pull request. The contribution guidelines ask for practical, actionable content with real-world examples and references to supporting tools or write-ups. The project is described as being made by hackers for the broader community, with the idea that finding vulnerabilities is as much a way of thinking as it is a set of technical skills. With over 7,000 stars and contributions from dozens of hunters across the world, it has become a notable reference for people learning the craft of web security testing.