Navigation

Recon
- Scope
- ASN/CIDR
- Whois
- Company Information
- Subdomain Enumeration
  - Passive
  - Active
- Port Scan
- Probing
- Screenshot
- Content Discovery
Exploitation
- Mobile
- Bypass
  - 403
  - WAF
- Authentication
  - JWT
  - SAML
  - 2FA
  - OAuth
- Cloud
- CMS
  - Wordpress
  - Drupal
  - Others
- Vulnerabilities
  - Cache poisoning
  - Clickjacking
  - Command Injection
  - Cookie Based Attacks
  - CRLF
  - CSRF
  - CORS
  - Deserialization
  - Host Header Injection
  - IDOR
  - IIS
  - LFI
  - Open Redirect
  - Parameter Pollution
  - Path Transversal
  - Prototype Pollution
  - Request Smuggling
  - RCE
  - SSTI
  - SSRF
  - SQLi
  - Timing Attacks
  - XSS
  - XXE
- Helpers
- Other
Resources
- Regexes
- Burp Suite
- Sites
- Writeups
- Youtube channels
- Web Tools
- Repositories
- Career

SAML

https://seanmelia.files.wordpress.com/2016/01/out-of-band-xml-external-entity-injection-via-saml-redacted.pdf
https://docs.google.com/presentation/d/1ngp3Mq8y2h2xwGKqkOhI1ePUQxvXTNO1Xhs1kaBJmqU/edit

JWT 2FA

Built with Hugo and