CyberRecon Arsenal — My All-in-One Cybersecurity Reconnaissance Toolkit (Now Free for Everyone!)

CyberRecon Arsenal is a free, all-in-one web-based toolkit for hackers, bug bounty hunters, and cybersecurity researchers. Perform…Continue reading on Medium »
Read more...

Portswigger Server-Side Request Forgery (SSRF) Labs — Practitioner

Blind SSRF with Out-of-Band DetectionContinue reading on Medium »
Read more...

Portswigger Server-Side Request Forgery (SSRF) Labs — Apprentice

Basic SSRF Against the Local ServerContinue reading on Medium »
Read more...

Portswigger Server-Side Request Forgery (SSRF) Labs — Expert

Blind SSRF with Shellshock ExploitationContinue reading on Medium »
Read more...

CVE-2025–8088 (WinRar Zero-Day)
https://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5

Its been a loooonngggggg since i made a detailed writeup, but this time its something different from my favorite gravvyyy!Continue reading on Medium » (https://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5)

CyberRecon Arsenal — My All-in-One Cybersecurity Reconnaissance Toolkit (Now Free for Everyone!)
https://medium.com/@letchupkt/cyberrecon-arsenal-my-all-in-one-cybersecurity-reconnaissance-toolkit-now-free-for-everyone-ade7f12e738b?source=rss------bug_bounty-5

CyberRecon Arsenal is a free, all-in-one web-based toolkit for hackers, bug bounty hunters, and cybersecurity researchers. Perform…Continue reading on Medium » (https://medium.com/@letchupkt/cyberrecon-arsenal-my-all-in-one-cybersecurity-reconnaissance-toolkit-now-free-for-everyone-ade7f12e738b?source=rss------bug_bounty-5)

Portswigger Server-Side Request Forgery (SSRF) Labs — Practitioner
https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-practitioner-1a9782bf775a?source=rss------bug_bounty-5

Blind SSRF with Out-of-Band DetectionContinue reading on Medium » (https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-practitioner-1a9782bf775a?source=rss------bug_bounty-5)

Portswigger Server-Side Request Forgery (SSRF) Labs — Apprentice
https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-apprentice-dc4c6a0802d7?source=rss------bug_bounty-5

Basic SSRF Against the Local ServerContinue reading on Medium » (https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-apprentice-dc4c6a0802d7?source=rss------bug_bounty-5)

Portswigger Server-Side Request Forgery (SSRF) Labs — Expert
https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-expert-68066b696b0c?source=rss------bug_bounty-5

Blind SSRF with Shellshock ExploitationContinue reading on Medium » (https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-expert-68066b696b0c?source=rss------bug_bounty-5)

NETWORK ENUMERATION — NMAP

Hey there! 👋 I’m currently working through the CPTS module from Hack The Box Academy and thought why not share my notes along the way…Continue reading on Medium »
Read more...

Portswigger Essential-skills Labs — Practitioner

Discovering Vulnerabilities Quickly with Targeted ScanningContinue reading on Medium »
Read more...

The 3 Tools you need for Bug Bounty / Pentesting

There are lots of web application security tools. A lot of these tools are not being used to their fullest potential by bug hunters…Continue reading on Medium »
Read more...

NETWORK ENUMERATION — NMAP
https://medium.com/@P4RAD0X/network-enumeration-nmap-6018ef8a7556?source=rss------bug_bounty-5