- Assetnote wordlists: https://wordlists.assetnote.io/
- SecList: https://github.com/danielmiessler/SecLists
- Rocklist: https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt
- Trickest: https://github.com/trickest/wordlists
Security Resources
⌘K
- Penetration Testing Tricks
- Secure Code Explain
- Application-level Denial of Service (DoS)
- Clickjacking
- Cross-origin resource sharing (CORS) Misconfiguration
- Cross-Site Request Forgery (CSRF)
- DOM Cross-Site-Scripting (XSS)
- Hardcoded Credentials
- Host Header Injection
- HSTS not Implemented
- HttpOnly Flag not set
- Insecure direct object references (IDOR)
- Insecure Password Reset – Token Exposed in Response
- Insecure Password Storage
- Insufficient Account Lockout Policy
- Java Deserialization
- Local File Inclusion
- Log Injection
- Missing Content-Security-Policy Header
- Open Redirection
- Reflected Cross-Site-Scripting (XSS)
- Remote Code Execution (RCE)
- Remote File Inclusion (RFI)
- Secure Cookie not set
- Server-Side Request Forgery (SSRF)
- Server-side template injection (SSTI)
- Session Fixation
- SQL Injection
- Stored Cross-Site-Scripting (XSS)
- Unrestricted File Upload
- Weak Password Policy
- XXE Injection
- Security Resources
- Vulnerability Explain
- Cross-Site-Scripting (XSS)
- Server-Side Request Forgery (SSRF)
- SQL Injection
- Insecure Direct Object References (IDOR)
- XML External Entity (XXE) Injection
- Remote Code Execution (RCE) and Command Injection
- Local File Inclusion (LFI) and Path Traversal
- Insecure Deserialization
- Open Redirection
- Authentication and JWT Bypass
- Server-Side Template Injection (SSTI)
- Remote File Inclusion (RFI)
- NoSQL Injection
- LDAP and XPath Injection
- CRLF Injection and HTTP Response Splitting
- Host Header Injection
- HTTP Request Smuggling
- Broken Access Control
- Session Fixation
- Clickjacking
- CORS Misconfiguration
- Unrestricted File Upload
- Security Misconfiguration
- Sensitive Data Exposure and Insecure Cryptographic Storage
- Business Logic and Race Condition Vulnerabilities
- GraphQL Security
- API Security and Mass Assignment
- Subdomain Takeover
- Prototype Pollution
- Web Cache Poisoning
- Vulnerable and Outdated Components
- Application-level Denial of Service (DoS)
- Security Roadmap
- FREE – Security Courses/Resources
- Home
- Security Resources
- Security Resources
- Wordlists