推荐几个我感觉不错的tips

howtohunt    

https://kathan19.gitbook.io/howtohunt/

  

HackTricks

https://book.hacktricks.xyz/pentesting-web/2fa-bypass

https://github.com/EdOverflow/bugbounty-cheatsheet

https://github.com/harsh-bothra/learn365

https://github.com/giteshnxtlvl/YourNextBugTip