Infosec tools
Read More
Hunting Blind XSS on the Large Scale — Practical Techniques
In this article, I will reveal the techniques for detecting Blind Cross-Site Scripting at scale. We will dive into the
XSS
Read More
Hunting Blind XSS on the Large Scale — Initial Setup
The Blind Cross-Site Scripting is a pretty serious client-side vulnerability with serious consequences. This type of vulnerability enables attackers to
Blog
Read More
Mass Hunting for Leaked Sensitive Documents
Significant portion of crucial data and documents is now stored online as the paper documents are becoming less popular. There
Bug bounty tips
Read More
Taking Bug Bounty to the Next Level: Mass Google Dorking Techniques
Many things have changed over the years, and the Google search engine is not the same anymore. It does not
Infosec tools
Read More
Mass Cross Site Scripting Hunting
In this article, I would like to cover how it is possible to efficiently check thousands of endpoints for potential
Blog
Read More
ChatGPT for Bug Bounty: Top Prompts for Automation
Various fields of society are increasingly embracing the famous AI tool, and information security is no exception. Top-tier security researchers
Blog
Read More
Top 5 Red Flags of Bug Bounty Programs
The best bug bounty hunters are not only hard-working people, but they also exhibit immense dedication, persistence, and patience. More
AXIOM
Read More
Mass Hunting For Misconfigured S3 Buckets
In this publication, I would like to cover how it is possible to efficiently check millions of misconfigured S3 buckets
Infosec tools
Read More
Creating Custom AXIOM Modules
In order to be successful in bug bounty, you have to be a little different from the crowd — use
Blog
Read More
Managing AXIOM Instances
As you probably learned from the previous part, it is usually a nice thing to have custom wordlists and tools