Browsing Category
Books
66 posts
Understanding and Defending Against Cross-Site Scripting (XSS) Vulnerabilities
Cross-Site Scripting (XSS) is consistently reported as one of the most common security flaws in web applications. Its…
Mastering Web Hacking Reconnaissance: The Foundation of Bug Bounty Hunting
The first step to attacking any target is conducting reconnaissance, or simply put, gathering information about the target.…
Environmental Setup and Traffic Interception
To hunt for bugs efficiently, you’ll need a well-configured environment. This chapter guides you through setting up your…
How the Internet Works: A Hacker’s Primer
Before jumping into hunting for bugs, it’s essential to understand how the internet works. Finding web vulnerabilities is…
Sustaining Your Success: Mastering the Bug Bounty Journey
Even if you understand the technical information, you may still have difficulty navigating the nuances of bug bounty…
Not All Bug Bounty Programs Are the Same: Finding Your Target
Finding the right bug bounty program to target is the crucial first step to becoming a successful bug…
(Out of Scope) Vulnerabilities: Knowing What Not to Report in Bug Bounty Programs
However, in the world of security research and bug bounties, there are several common findings and false positives…
Access Control and Security Through Obscurity
Security through obscurity is a strategy in web application development that makes the dangerous assumption that a vulnerability…
Detecting XML External Entities (XXE) Vulnerabilities
XML External Entity (XXE) is an attack that exploits a flaw in an application’s XML parser configuration to…
Cross-Site Request Forgery (CSRF) and Insecure Session Authentication
Cross-Site Request Forgery (CSRF) is a vulnerability where an attacker takes advantage of a logged-in user’s authenticated state…