Navigation

Recon
- Scope
- ASN/CIDR
- Whois
- Company Information
- Subdomain Enumeration
  - Passive
  - Active
- Port Scan
- Probing
- Screenshot
- Content Discovery
Exploitation
- Mobile
- Bypass
  - 403
  - WAF
- Authentication
  - JWT
  - SAML
  - 2FA
  - OAuth
- Cloud
- CMS
  - Wordpress
  - Drupal
  - Others
- Vulnerabilities
  - Cache poisoning
  - Clickjacking
  - Command Injection
  - Cookie Based Attacks
  - CRLF
  - CSRF
  - CORS
  - Deserialization
  - Host Header Injection
  - IDOR
  - IIS
  - LFI
  - Open Redirect
  - Parameter Pollution
  - Path Transversal
  - Prototype Pollution
  - Request Smuggling
  - RCE
  - SSTI
  - SSRF
  - SQLi
  - Timing Attacks
  - XSS
  - XXE
- Helpers
- Other
Resources
- Regexes
- Burp Suite
- Sites
- Writeups
- Youtube channels
- Web Tools
- Repositories
- Career

Exploitation

Go bananas

SMS Verification Brute Force

Built with Hugo and