web 20
- Cross-site request forgery: The ultimate Bug Bounty guide to exploiting CSRF vulnerabilities
- SQL injection for Bug Bounty hunters
- YesWeCaido: a new Caido plugin for tracking Bug Bounty Programs
- A hacker’s guide to Google dorking
- HTTP header hacks: basic and advanced exploit techniques explored
- The art of payload obfuscation: how to mask malicious scripts and bypass defence mechanisms
- HTTP fingerprinting – sleuthing for a web application’s hidden vulnerabilities
- Recon Series #2: Subdomain enumeration – expand attack surfaces with active, passive techniques
- XSS attacks and exploitation: The ultimate guide to cross-site scripting
- White-box penetration testing: How to debug for JavaScript vulnerabilities
- White-box penetration testing: Debugging for Python vulnerabilities
- Limitations are just an illusion - advanced server-side template exploitation with RCE everywhere
- White-box penetration testing with Xdebug: Debugging for PHP vulnerabilities
- Limited SSRF with blind file read, resulting in full file read
- Infected signature in PDF document leads to mass account takeover
- Smart Automation With Burp Suite
- Exploring JavaScript's Exploits: A Deep Dive Into XSS Vulnerabilities
- Web Application Black-Box Testing
- Use BCheck To Improve Vulnerability Scanning
- Web Application Firewall Bypass