Navigation

Recon
- Scope
- ASN/CIDR
- Whois
- Subdomain Enumeration
  - Passive
  - Active
- Port Scan
- Probing
- Screenshot
- WAF Check
- Content Discovery
Exploitation
- Bypass
  - 403
  - WAF
- Authentication
  - JWT
  - SAML
  - 2FA
  - OAuth
- Cloud
- Vulnerabilities
  - Cache poisoning
  - Clickjacking
  - Command Injection
  - Cookie Based Attacks
  - CRLF
  - CSRF
  - CORS
  - Deserialization
  - Host Header Injection
  - IDOR
  - IIS
  - LFI
  - Open Redirect
  - Parameter Pollution
  - Path Transversal
  - Prototype Pollution
  - Request Smuggling
  - RCE
  - SSTI
  - SSRF
  - SQLi
  - XSS
  - XXE
- Other
Resources
- Regexes
- Burp Suite
- Sites
- Youtube channels
- Writeups
- Youtube channels
- Web Tools
- Repositories
- Career

Wafcheck

WAF Check

Wafw00f

# https://github.com/EnableSecurity/wafw00f
wafw00f -i websites.txt

Screenshot Dorking

Built with Hugo and