How to Discover SQL Injections
A comprehensive writeup emphasizing the importance of context
Jan 9, 20238 min read
Command Palette
Search for a command to run...
Latest articles
Testing File Upload Mechanism
Straightforward Approach to Hacking File Uploads
Jul 7, 20229 min read
XXE - Underrated?
How to Gain Access To All The Data - Tips Tricks and Resources
Jul 6, 20224 min read
CSRF Revisited
What you've been taught VS What you will see.
Jul 5, 20226 min read
SSRF Demystified
From Detection To High Impact Exploitation
Jul 4, 20227 min read
IDOR - Broken Authentication
Methods and Strategies to Break Authorization
Jul 3, 202211 min read
Quick XSS Tutorial
How to Find XSS with Burp (and then some)
Jul 3, 20223 min read
Local File Inclusion and Path Traversal Attacks
Find Exploit Impact
Jul 3, 20225 min read
Everything You Need To Know About Open-Redirects
Background, Detection, Exploitation, Impact
Jun 27, 20227 min read