Reflected XSS in bug bounty program {ScriptKiddie methodology Version}
![Image](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilcxKRg0hx6Er6u2m8lxAamDhkG0czq6GBR3Jm1VLLSfVp1V2Mr6vdWP5psZvGza2pf7FjUbnnk9tq2kJVJ5tgl71hJNuZl-OFe3vb7-8_IEXxKgxjqnBsI11M4XcWm6AcSTTMld-ffeYsJrm05tUrqBLuGARyJrJUHfzz-ZzmBr3dBzQnkDJlgmAv-A/s320/FB_IMG_1640199288693.jpg)
Methodology 1- As usual.. i strated from finding sub-domains using 7 methods - Sbfinder -d domain.com - Sublist3r -d domain.com -b -t 50 -o sublist3r.txt - amass enum -d domain.com -active -cidr 1.2.3.4/24,4.3.2.1/24 -asn 12345 - crtfinder python crtfinder.py -u domain.com - using google dorks - shodan manual search - Github manual search Then save all this unique subdomains into --> all_subdomains.txt