Navigation

Recon
- Scope
- ASN/CIDR
- Whois
- Company Information
- Subdomain Enumeration
  - Passive
  - Active
- Port Scan
- Probing
- Screenshot
- Content Discovery
Exploitation
- Mobile
- Bypass
  - 403
  - WAF
- Authentication
  - JWT
  - SAML
  - 2FA
  - OAuth
- Cloud
- CMS
  - Wordpress
  - Drupal
  - Others
- Vulnerabilities
  - Cache poisoning
  - Clickjacking
  - Command Injection
  - Cookie Based Attacks
  - CRLF
  - CSRF
  - CORS
  - Deserialization
  - Host Header Injection
  - IDOR
  - IIS
  - LFI
  - Open Redirect
  - Parameter Pollution
  - Path Transversal
  - Prototype Pollution
  - Request Smuggling
  - RCE
  - SSTI
  - SSRF
  - SQLi
  - Timing Attacks
  - XSS
  - XXE
- Helpers
- Other
Resources
- Regexes
- Burp Suite
- Sites
- Writeups
- Youtube channels
- Web Tools
- Repositories
- Career

Web3

https://github.com/slowmist/Knowledge-Base
https://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor
https://www.youtube.com/@opensensepw
https://www.youtube.com/@0xOwenThurm
https://capturetheether.com/
https://www.damnvulnerabledefi.xyz/

Web technologies Regexes

Built with Hugo and