Media is too big
VIEW IN TELEGRAM
🔖 A TO Z ABOUT XSS
Overview:-
Cross-Site Scripting (XSS) attack are a type of injection,in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.
An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execute the script. Because it thinks the script came from a trusted source, the malicious script can access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. These scripts can even rewrite the content of the HTML page.
🧩 #XSS
📰 @BackupLSO
📚 @LibrarySecOfficial
Overview:-
Cross-Site Scripting (XSS) attack are a type of injection,in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.
An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execute the script. Because it thinks the script came from a trusted source, the malicious script can access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. These scripts can even rewrite the content of the HTML page.
🧩 #XSS
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
Websites pentesting With Burpsuite
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
how to setup Mobile app Traffic proxy with Burp Suite
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
Scan for Vulnerabilities on Any Website Using Nikto
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
How Pentester Scan vulnerability of Any Website
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️
📖 Cyber Security books and sources
📚 @LibrarySecOfficial
💠 Blueteam sources:
⭕️ @BlueTeamKit
💠 Osint tools and courses:
⭕️ @OsintGit
💠 Cyber Security Courses and Resources & Learn Bug bounty:
⭕ @BackupLso
💠 All Red Team resources are here!
⭕ @RedTeamVillageRtv
💠 To add to the message list:
🤖 @LibrarySecOfficialBot
⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️
📖 Cyber Security books and sources
📚 @LibrarySecOfficial
💠 Blueteam sources:
⭕️ @BlueTeamKit
💠 Osint tools and courses:
⭕️ @OsintGit
💠 Cyber Security Courses and Resources & Learn Bug bounty:
⭕ @BackupLso
💠 All Red Team resources are here!
⭕ @RedTeamVillageRtv
💠 To add to the message list:
🤖 @LibrarySecOfficialBot
⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️
Subdomain_hunting_NETFLIX_AND_ENUMERATION_1704752989.pdf
4.3 MB
🔖 Subdomain Hunting Netflix Enumeration
❤ Share & Support US
#SubDomain
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support US
#SubDomain
📰 @BackupLSO
📚 @LibrarySecOfficial
✎ Deobfuscate obfuscator.io, unminify, transpile, and unpack webpack/browserify, using webcrack to resemble the original source code as much as possible.
Command Line Interface
Examples
• Repository: Github
• Website: webcrack.netlify.app
#bugbounty #recon #javascript #deobfuscate
📰 @BackupLSO
📚 @LibrarySecOfficial
Command Line Interface
npm install -g webcrack
Examples
webcrack input.js
webcrack input.js > output.js
webcrack bundle.js -o output-dir
• Repository: Github
• Website: webcrack.netlify.app
#bugbounty #recon #javascript #deobfuscate
📰 @BackupLSO
📚 @LibrarySecOfficial
This media is not supported in your browser
VIEW IN TELEGRAM
🧑🎓 👉 SQL Injection $1000 Bounty | Bug bounty POC by The Cyberboy, 2024
See also:
❗️ How Finding an SQL Injection Vulnerability Earned a $1000 Bug Bounty
❗️ SQL Injection Bug Bounty POC
❗️ SQL Injection by HackTricks
📰 @BackupLSO
📚 @LibrarySecOfficial
See also:
❗️ How Finding an SQL Injection Vulnerability Earned a $1000 Bug Bounty
❗️ SQL Injection Bug Bounty POC
❗️ SQL Injection by HackTricks
📰 @BackupLSO
📚 @LibrarySecOfficial
This media is not supported in your browser
VIEW IN TELEGRAM
OWASP Juice Shop Walkthrough All-in-one-PDF, 2025 (upd)
Updated 2025 version
OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools!
Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!
💥Official page
Early post:
YouTube playlist + PDF (2020)
❤ Share & Support & Reaction Us
🧩 #Owasp
📰 @BackupLSO
📚 @LibrarySecOfficial
OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools!
Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!
💥Official page
Early post:
YouTube playlist + PDF (2020)
❤ Share & Support & Reaction Us
🧩 #Owasp
📰 @BackupLSO
📚 @LibrarySecOfficial
Complete SQLMap Database Penetration Testing Guide by Harshit Rajpal & Aarti Singh
This PDF breaks down SQLMap from beginner to advanced level, with real-world examples, commands, and workflows that mirror what you’d do in an actual assessment.
🔹 SQL Injection Detection
– Error-based, Boolean-based, Time-based
– Identifying vulnerable parameters
– Breaking queries to trigger server errors
🔹 Database Enumeration
– Listing DBMS names
– Enumerating databases, tables, columns
– Extracting sensitive data safely
🔹 Data Extraction Techniques
– Dumping specific tables
– Full database dumps
– Hash extraction and format recognition
🔹 SQLMap Targeting Options
– -u for single URL targeting
– Attacking from log files
– Bulk attack using multiple URLs
– Using Google Dorks with SQLMap
– Running SQLMap on intercepted HTTP requests (-r option)
🔹 File System & OS Interaction
– Uploading / downloading files
– Executing system commands
– Out-of-band shells and Meterpreter sessions
📰 @BackupLSO
📚 @LibrarySecOfficial
This PDF breaks down SQLMap from beginner to advanced level, with real-world examples, commands, and workflows that mirror what you’d do in an actual assessment.
🔹 SQL Injection Detection
– Error-based, Boolean-based, Time-based
– Identifying vulnerable parameters
– Breaking queries to trigger server errors
🔹 Database Enumeration
– Listing DBMS names
– Enumerating databases, tables, columns
– Extracting sensitive data safely
🔹 Data Extraction Techniques
– Dumping specific tables
– Full database dumps
– Hash extraction and format recognition
🔹 SQLMap Targeting Options
– -u for single URL targeting
– Attacking from log files
– Bulk attack using multiple URLs
– Using Google Dorks with SQLMap
– Running SQLMap on intercepted HTTP requests (-r option)
🔹 File System & OS Interaction
– Uploading / downloading files
– Executing system commands
– Out-of-band shells and Meterpreter sessions
📰 @BackupLSO
📚 @LibrarySecOfficial