Bounty Techniques

JWT 2FA Bypass OAuth Password Reset Session Mgmt CSRF IDOR Access Control CORS Clickjacking Host Header Open Redirect XSS SQL Injection Command Injection XXE SSTI CRLF LFI/RFI SSRF Deserialization Takeover Info Disclosure API Security GraphQL WebSockets Rate Limit Race Conditions Logic Errors Misconfig Captcha WAF Bypass DoS Support Portal File Upload