Web Security | Bug hunting
@cybersecurityresources
7.41K subscribers
46 photos
2 files
473 links
A web penetration testing / General cybersecurity / Network related topics channel that provides direct links for interesting resources and notes.
Download Telegram
About
Blog
Apps
Platform
Join
Web Security | Bug hunting
7.41K subscribers
Web Security | Bug hunting
https://github.com/troydo42/Awesome-Pen-Test.git
312 views
Web Security | Bug hunting
https://portswigger.net/web-security/ssrf?fbclid=IwAR0RAvn7raz8mMa0b-ggcPWugLtnCDWGeplhAeKmm2ad6zROtDwRTWpUK4A
portswigger.net
What is SSRF (Server-side request forgery)? Tutorial & Examples | Web Security Academy
In this section we explain what server-side request forgery (SSRF) is, and describe some common examples. We also show you how to find and exploit SSRF ...
322 views
Web Security | Bug hunting
https://github.com/Meatballs1/burp-extensions
GitHub
GitHub - Meatballs1/burp-extensions: Burp Suite Extensions
Burp Suite Extensions. Contribute to Meatballs1/burp-extensions development by creating an account on GitHub.
308 views
Web Security | Bug hunting
https://youtu.be/QKfk7YFILws
295 views
Web Security | Bug hunting
https://www.youtube.com/playlist?list=PLmAuaUS7wSONCNeRlehLHK4_SvYxG3UPj
YouTube
IT security / Cyber Security - YouTube
276 views
Web Security | Bug hunting
https://medium.com/@vignesh4303/collection-of-bug-bounty-tip-will-be-updated-daily-605911cfa248
Medium
Collection Of Bug Bounty Tip-Will Be updated daily-2jun 2021
Whenever i see for bug bounty tips and tricks i wish to make it up a note , The following were the bug bounty tips offered by experts at…
311 views
Web Security | Bug hunting
https://medium.com/@tomnomnom/crlf-injection-into-phps-curl-options-e2e0d7cfe545
Medium
CRLF Injection Into PHP’s cURL Options
This is a post about injecting carriage return and line feed characters into a internal API call. I wrote this up a year ago as a Gist on…
293 views
Web Security | Bug hunting
CollabOzark is a simple tool which helps the researchers track SSRF, Blind XSS, XXE, SQLi, External Resource Access payloads triggers.

https://github.com/securityidiots/CollabOzark
GitHub
GitHub - securityidiots/CollabOzark: CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE,…
CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers. - GitHub - securityidiots/CollabOzark: CollabOzark is a simple ...
283 views
Web Security | Bug hunting
https://www.vice.com/en_us/article/597axx/why-are-passwords-still-a-thing-is-good-if-thats-fair
Vice
Why Are Passwords Still a Thing?
Passwords aren't secure and they might never have been.
284 views
Web Security | Bug hunting
https://medium.com/@ghostlulzhacks/xml-external-entity-xxe-62bcd1555b7b
Medium
XML External Entity(XXE)
OWASP top 10 XXE
291 views
Web Security | Bug hunting
https://www.allabouthack.com/2019/06/how-to-create-an-advance-password-list.html
293 views
Web Security | Bug hunting
https://medium.com/swlh/how-to-write-a-better-vulnerability-report-20163ab913fb
Medium
How to Write a Better Vulnerability Report
Security teams are humans too. (1337 5p34k not included.)
323 views
Web Security | Bug hunting
Cryptocurrency Mining Scripts Now Run Even After You Close Your Browser

https://thehackernews.com/2017/11/cryptocurrency-mining-javascript.html
360 views
Web Security | Bug hunting
web-hacking-101-ar.pdf
3.5 MB
Web Hacking 101 (Arabic version) 😄😄
961 views
Web Security | Bug hunting
https://www.corben.io/advanced-cors-techniques/
347 views
Web Security | Bug hunting
https://medium.com/@z3roTrust/bypassing-windows-user-account-control-9051c6a85734?aduc=sSbVDh01561870808224
Medium
Bypassing Windows User Account Control
Originally published at www.peerlyst.com.
317 views
Web Security | Bug hunting
https://medium.com/swlh/csrf-cross-site-request-forgery-attack-and-ways-to-combat-it-in-rails-7d0ae7de57d2
Medium
CSRF(Cross-site Request Forgery Attack) and ways to combat it in Rails
While I was working on making a website with a form that accepts user responses using rails framework and testing to see if the requests…
281 views
Web Security | Bug hunting
Cyber Security Posts ( By : Eng. Muhammad Gamal )
https://pastebin.com/cj9FEuEB?fbclid=IwAR1E-MHAh5ZJjrpAL2FDELasyoofW4T8fnBFWQSvwkd7E-sYo3OR_ANRQHQ
Pastebin
Cyber Security Posts Parts - Pastebin.com
269 views
Web Security | Bug hunting
it's a simple tool to decrypt [ MD5, SHA1, SHA224, SHA256, SHA384, SHA512 ] .
https://github.com/X-Vector/Fuck-Hash
GitHub
GitHub - X-Vector/Fuck-Hash: Hash Decryption
Hash Decryption . Contribute to X-Vector/Fuck-Hash development by creating an account on GitHub.
316 viewsedited  
Web Security | Bug hunting
https://medium.com/bugbountywriteup/think-outside-the-scope-advanced-cors-exploitation-techniques-dad019c68397
Medium
Think Outside the Scope: Advanced CORS Exploitation Techniques
Hi everyone,
311 views
Web Security | Bug hunting
https://medium.com/@injector.pca_87232/self-xss-to-evil-xss-bcf2494a82a4
Medium
Self XSS To Evil XSS
Hi guy I hope you all are fine this POC is all about how I convert the Self XSS To Evil XSS so let assume the site PRIVATE.COM
295 views