Cross-Site Scripting (XSS) Playbook
This XSS guide covers everything you need to understand, test, and exploit cross-site scripting vulnerabilities in real-world applications.
bericontraster
Editor — HackTheBox Full Walkthrough
Read full walkthrough of Editor from HackTheBox.
If I Joined Your Security Team, This Is What I’d Fix in the First 90 Days
I’d start by figuring out what I could do inside your environment without being noticed.
Nmap Cheat Sheet
A quick-access reference covering essential Nmap commands, scanning techniques, evasion tricks, and enumeration options for fast and effective network reconnaissance.
Mastering Reflected Cross-Site Scripting & Bypassing Filters
Learn how reflected cross-site scripting (XSS) attacks work and how attackers bypass security filters. This blog covers real-world examples, payload techniques, and prevention tips to help you understand and defend against reflected XSS vulnerabilities.
AWS Cognito User & Identity Pole
Learn how to harness the power of Nuclei, a fast, customizable vulnerability scanner from ProjectDiscovery. This guide walks you through installation, template usage, and practical examples to help automate security testing across web applications and infrastructure with ease.
Fuzzing The Web: 101
A complete fuzzing guide for penetration testers and bug bounty hunters. Learn how to discover hidden domains, directories, and files using the best wordlists and tools like ffuf, dirsearch, Gobuster, and more. Step-by-step commands and practical examples included to help automate reconnaissance and maximize your attack surface discovery.
Android Penetration Testing Lab Setup
Set up the ultimate Android pentesting lab with tools like Genymotion, ADB, JADX, and APKTool. Follow this step-by-step guide to install, configure, and start testing Android apps for security vulnerabilities. Perfect for ethical hackers, mobile security analysts, and pentesters.
Git Playbook: The Complete Guide to Git Commands for Version Control
If you’ve ever felt a bit lost setting up Git on Linux, you’re not alone and this blog is here to help. I’ll walk you through everything you need to get Git up and running, from installing it to setting up your name, email, and SSH keys. By the end, you won’t just have Git installed you’ll know how to actually use it like a pro.
Nuclei Vulnerability Scanner HandBook
Learn how to harness the power of Nuclei, a fast, customizable vulnerability scanner from ProjectDiscovery. This guide walks you through installation, template usage, and practical examples to help automate security testing across web applications and infrastructure with ease.