Welcome to caon.io
This site contains mostly stuff about appsec that may be helpful for Red Teamers or bug bounty hunters out there.
Everything written in here and in the following pages was acquired by reading articles, books, watching videos and talks. None of this is exclusive, if you want to copy, feel free.
The basics
Hacking is like building a house, you need to construct a foundation before making the roof.
Newsletter
Sources to keep you informed about sec world
CVE POC’s
Recon 15 entries
Exploitation 61 entries
- 2FAAuthentication
- 403 BypassBypass
- Account TakeoverWorkflows
- Amazon AWSCloud
- AndroidMobile
- APK DecompilersMobile
- AzureCloud
- Brute ForceOther
- Business LogicWorkflows
- Cache PoisoningVulnerabilities
- CI/CDTechniques
- ClickjackingVulnerabilities
- Command InjectionVulnerabilities
- Cookie Based AttacksVulnerabilities
- CORSVulnerabilities
- CRLFVulnerabilities
- CSP Bypass TechniquesBypass
- CSPTVulnerabilities
- CSRFVulnerabilities
- Dependency ConfusionTechniques
- DeserializationVulnerabilities
- DOM ClobberingTechniques
- DrupalCMS
- File UploadVulnerabilities
- FlutterMobile
- Google GCPCloud
- GraphQLVulnerabilities
- Host Header InjectionVulnerabilities
- IDORVulnerabilities
- IISVulnerabilities
- JavascriptTechniques
- JWTAuthentication
- LFIVulnerabilities
- Mass AssignmentVulnerabilities
- NoSQL InjectionVulnerabilities
- OAuthAuthentication
- Open RedirectVulnerabilities
- OthersCMS
- Parameter PollutionTechniques
- Path TransversalVulnerabilities
- Payment WorkflowWorkflows
- Prototype PollutionVulnerabilities
- Race ConditionsVulnerabilities
- Remote Code ExecutionVulnerabilities
- Request SmugglingVulnerabilities
- SAMLAuthentication
- SQLiVulnerabilities
- SSRFVulnerabilities
- SSTIVulnerabilities
- Subdomain TakeoverTechniques
- Timing AttacksTechniques
- UUIDTechniques
- WAF Bypass TechniquesBypass
- Web Cache DeceptionVulnerabilities
- Web TechnologiesOther
- Web3Other
- WebSocketsVulnerabilities
- WordpressCMS
- Wordpress CVE BoilerplatesCMS
- XSSVulnerabilities
- XXEVulnerabilities