OWASP/wstg

Hackerone and Bugcrowd Links

Open

#535 opened on Aug 4, 2020

View on GitHubContributor guide
 (19 comments) (0 reactions) (0 assignees) (1,624 forks)github user discovery
enhancementhelp wanted

Repository metrics

Stars
 (9,439 stars)
PR merge metrics
 (Avg merge 24d 19h) (22 merged PRs in 30d)

Description

What would you like to happen? What do you think about adding to every test scenario possible bug bounty reports that are relevant and provide value. One example would be for file upload XSS since we are updating it: https://hackerone.com/reports/880099

CC: @rbsec @kingthorin

Contributor guide

Research direction
Find relevant public bug bounty reports from HackerOne and Bugcrowd, and insert them into the corresponding test scenarios in the Web Security Testing Guide.
Tech stack
None
Domain
securitydocumentation
Issue type
Documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
1
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Under 1 hour
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Basic understanding of web security
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
90