Bug Bounty Checklist

Recon

Find a Bug Bounty Program Web archive history

Enumeration

Subdomain Enumeration Path Enumeration Parameter Enumeration CMS identification

Exploitation

Scanners LFI XSS Subdomain Takeover Exposed .git GCP API Keys IDOR Open Redirect