Security Resources

• Penetration Testing Tricks
  • 2FA Bypass
  • Captcha Bypass
  • Graphql [Inprogress]
  • Subdomain Enumeration Tools
  • One-Liners for Bug Bounty
• Secure Code Explain
  • Application-level Denial of Service (DoS)
  • Clickjacking
  • Cross-origin resource sharing (CORS) Misconfiguration
  • Cross-Site Request Forgery (CSRF)
  • DOM Cross-Site-Scripting (XSS)
  • Hardcoded Credentials
  • Host Header Injection
  • HSTS not Implemented
  • HttpOnly Flag not set
  • Insecure direct object references (IDOR)
  • Insecure Password Reset – Token Exposed in Response
  • Insecure Password Storage
  • Insufficient Account Lockout Policy
  • Java Deserialization
  • Local File Inclusion
  • Log Injection
  • Missing Content-Security-Policy Header
  • Open Redirection
  • Reflected Cross-Site-Scripting (XSS)
  • Remote Code Execution (RCE)
  • Remote File Inclusion (RFI)
  • Secure Cookie not set
  • Server-Side Request Forgery (SSRF)
  • Server-side template injection (SSTI)
  • Session Fixation
  • SQL Injection
  • Stored Cross-Site-Scripting (XSS)
  • Unrestricted File Upload
  • Weak Password Policy
  • XXE Injection
• Security Resources
  • Browser Extensions
  • HTTP Security Headers
  • Input Sanitization Techniques for Secure Coding
  • Out-of-Band Exfiltration Tools
  • Search Engines for Hackers
  • Wordlists
• Vulnerability Explain
  • Cross-Site-Scripting (XSS)
  • Server-Side Request Forgery (SSRF)
  • SQL Injection
  • Insecure Direct Object References (IDOR)
  • XML External Entity (XXE) Injection
  • Remote Code Execution (RCE) and Command Injection
  • Local File Inclusion (LFI) and Path Traversal
  • Insecure Deserialization
  • Open Redirection
  • Authentication and JWT Bypass
  • Server-Side Template Injection (SSTI)
  • Remote File Inclusion (RFI)
  • NoSQL Injection
  • LDAP and XPath Injection
  • CRLF Injection and HTTP Response Splitting
  • Host Header Injection
  • HTTP Request Smuggling
  • Broken Access Control
  • Session Fixation
  • Clickjacking
  • CORS Misconfiguration
  • Unrestricted File Upload
  • Security Misconfiguration
  • Sensitive Data Exposure and Insecure Cryptographic Storage
  • Business Logic and Race Condition Vulnerabilities
  • GraphQL Security
  • API Security and Mass Assignment
  • Subdomain Takeover
  • Prototype Pollution
  • Web Cache Poisoning
  • Vulnerable and Outdated Components
  • Application-level Denial of Service (DoS)
• Security Roadmap
  • Bug Bounty Roadmap
  • Cloud Security Roadmap
• FREE – Security Courses/Resources
  • CCSP
  • Real Ethical Hacking in 43 Hours Certificated CSEH+CEH 2024
  • FREE Bug Bounty Advanced Hunting Course