Blog
Read More
One SSRF to Rule Them All
From one single callback, to full control of the server. I was at a coffee shop, laptop open, just starting
Tag: cybersecurity
AXIOM
Read More
AXIOM vs ShadowClone
Looking for a powerful tool to revolutionize your bug bounty recon? Today, we’re comparing AXIOM and ShadowClone — two of
WAF Bypass
Read More
Common 403 Bypasses Part 2
Back for more 403 bypasses? In this article, we will check various tools to help with the whole process. Get
Bug bounty tips
Read More
Advanced SQLMap Customization
Do you know that you can add custom payloads to the SQLMap? This tool is powerful out of the box,
Bug bounty tips
Read More
Common 403 Bypasses Part 1
Are you tired of seeing those 403 Forbidden errors that block you while testing? Don’t worry, some effective techniques could
SQLi
Read More
SQLi WAF Bypass Techniques Part 2 – Other Attacks
In our last session, we learned primary Time-Based SQL injection WAF bypasses. This time, we will move one step further
Bug bounty tips
Read More
SQLi WAF Bypass Techniques Part 1 – Time-Based Attacks
Web Application Firewall is a good but not perfect solution for protecting websites. It’s the defense framework made by request
Content Discovery
Read More
Find Sensitive Files with FFUF
The majority do not know what could be done after getting pages like IIS, default Apache, or any other webpage
Bug bounty tips
Read More
Your Own Search Engines For Bug Bounty
Using Google and Bing Dorking could get leads for pretty big bounties! Do you know you can customize those search
Nuclei
Read More
Building Own Nuclei Templates
It’s time to break the atoms! We will take a look at how it’s possible to create unique nuclei templates!