--- title: "#bughunter articles | Hashnode" description: "Explore 9 articles tagged #bughunter on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/bughunter" --- Tag # #bughunter 9 posts · 0 followers [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 21](https://hashnode.com/posts/mapping-a-web-app-s-attack-surface/6a884da26810efa37bfc32ac) ### [Mapping a Web App’s Attack Surface](https://webpentestingdeepdive.hashnode.dev/mapping-a-web-app-s-attack-surface?utm_source=hashnode&utm_medium=feed) Understand how security testers analyze web applications, endpoints, and functionality to uncover potential attack surfaces and security weaknesses. 6 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/mapping-a-web-app-s-attack-surface?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 20](https://hashnode.com/posts/web-fingerprinting-tech-mapping/6a86d91eee88e35b950a4de8) ### [Web Fingerprinting & Tech Mapping](https://webpentestingdeepdive.hashnode.dev/web-fingerprinting-tech-mapping?utm_source=hashnode&utm_medium=feed) Discover practical web server fingerprinting techniques using HTTP headers, cookies, extensions, URL patterns, and behavioral responses to map a target’s technology stack. 4 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/web-fingerprinting-tech-mapping?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 19](https://hashnode.com/posts/analyzing-the-application/6a85ca8ef377cf2d4eddee90) ### [Analyzing the Application](https://webpentestingdeepdive.hashnode.dev/analyzing-the-application?utm_source=hashnode&utm_medium=feed) Learn how to analyze web applications by mapping functionality, security mechanisms, URL paths, request parameters, cookies, HTTP headers, APIs, and out-of-band channels to identify key attack surfaces for security testing. 5 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/analyzing-the-application?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 18](https://hashnode.com/posts/web-app-recon-part-3/6a848695437ee852b1961c63) ### [Web App Recon (Part-3)](https://webpentestingdeepdive.hashnode.dev/web-app-recon-part-3?utm_source=hashnode&utm_medium=feed) A practical introduction to web application reconnaissance covering search engines, archives, developer information, web servers, hidden content, and functional paths. 4 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/web-app-recon-part-3?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 17](https://hashnode.com/posts/application-mapping-part-2/6a832fb0d277e0a2ae7e68d0) ### [Application Mapping(PART-2)](https://webpentestingdeepdive.hashnode.dev/application-mapping-part-2?utm_source=hashnode&utm_medium=feed) Explore practical techniques for finding hidden web content through route mapping, response analysis, pattern recognition, and targeted enumeration. 3 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/application-mapping-part-2?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/application-mapping-part-2/6a832fb0d277e0a2ae7e68d0) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 16](https://hashnode.com/posts/application-mapping-web-security-foundation/6a81c5246b8f7989000ad270) ### [Application Mapping: Web Security Foundation](https://webpentestingdeepdive.hashnode.dev/application-mapping-web-security-foundation?utm_source=hashnode&utm_medium=feed) Learn application mapping, web crawling, endpoint discovery, attack surface analysis, and automated crawler limitations. 2 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/application-mapping-web-security-foundation?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/application-mapping-web-security-foundation/6a81c5246b8f7989000ad270) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 15](https://hashnode.com/posts/encoding-in-web-applications/6a806a646acf62affc24301b) ### [Encoding in Web Applications](https://webpentestingdeepdive.hashnode.dev/encoding-in-web-applications?utm_source=hashnode&utm_medium=feed) Learn web encoding schemes with practical examples. Explore URL, HTML, Unicode/UTF-8, Base64, Hex encoding, serialization, and their role in web security and bug bounty testing. 6 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/encoding-in-web-applications?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/encoding-in-web-applications/6a806a646acf62affc24301b) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 13](https://hashnode.com/posts/common-web-application-technologies/6a7e0e84bc892488c6743968) ### [Common Web Application Technologies](https://webpentestingdeepdive.hashnode.dev/common-web-application-technologies?utm_source=hashnode&utm_medium=feed) Learn how Java, ASP.NET, PHP, Rails, SQL, XML, and SOAP work in web applications and where security weaknesses can appear during web pentesting. 7 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/common-web-application-technologies?utm_source=hashnode&utm_medium=feed) [Shahabaj Khan](https://hashnode.com/@kshahabaj528) · [May 10, 2025](https://hashnode.com/posts/5-beginner-friendly-vulnerabilities-every-bug-bounty-hunter-should-master/681f76130852512f1d7227bc) ### [🐞 5 Beginner-Friendly Vulnerabilities Every Bug Bounty Hunter Should Master](https://ehackopedia.hashnode.dev/5-beginner-friendly-vulnerabilities-every-bug-bounty-hunter-should-master?utm_source=hashnode&utm_medium=feed) By Shahabaj Khan | Cybersecurity Expert | Bug Bounty Hunter | CEH | eHackopedia 4 min read · [ehackopedia.hashnode.dev](https://ehackopedia.hashnode.dev/5-beginner-friendly-vulnerabilities-every-bug-bounty-hunter-should-master?utm_source=hashnode&utm_medium=feed)