---
description: >-
  If you enjoy what I do, please support me  Buy Me Ko-fi!
  https://ko-fi.com/h0tak88r
---

# Web-AppSec

## Bugs Advanced Exploitation

> \[!bug] HTB: Corporate | 0xdf hacks stuff

## Resolved Reports

> \[!Important] Top Discloused ReportsGitHub - reddelexc/hackerone-reports: Top disclosed reports from HackerOne ⭐

[Reports | Bugreader](https://bugreader.com/reports)

## Blind , CSRF … POC

> \[!NOTE] Free Hosting Login to your account - InfinityFree

## Articles

[All Web Security Academy topics | Web Security Academy - PortSwigger](https://portswigger.net/web-security/all-topics) ⭐

### Cloud

[Blogs - RedHunt Labs](https://redhuntlabs.com/blogs/)

## Git Books

> \[!important]
>
> * [HackTricks](https://book.hacktricks.xyz/)
> * [Payloads All The Things](https://techbrunch.github.io/)
> * [Exploit Notes](https://exploit-notes.hdks.org/)
> * [HowToHunt.md \\| HowToHunt](https://kathan19.gitbook.io/howtohunt)

## Lists

* **Crypto-Cat** List [GitHub - Crypto-Cat/CTF: CTF chall write-ups, files, scripts etc (trying to be more organised LOL)](https://github.com/Crypto-Cat/CTF?tab=readme-ov-file)
* Lists for coding, AI , Cybersecurity [GitHub - 0xor0ne/awesome-list: Cybersecurity oriented awesome list](https://github.com/0xor0ne/awesome-list?tab=readme-ov-file#awesome-lists)
* **Books** , **Tools** , **Talks**[GitHub - nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters: A list of resources for those interested in getting started in bug bounties](https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters)
* **Jhaddix** Bookmarks [pentest-bookmarks/wiki/BookmarksList.wiki at master · jhaddix/pentest-bookmarks · GitHub](https://github.com/jhaddix/pentest-bookmarks/blob/master/wiki/BookmarksList.wiki#user-content-Methodologies)
* **Books** list [GitHub - yeahhub/Hacking-Security-Ebooks: Top 100 Hacking & Security E-Books (Free Download)](https://github.com/yeahhub/Hacking-Security-Ebooks)

## Mind Maps

[Xmind Share - Xmind - Mind Mapping App](https://xmind.app/share/_xmind_EhTtFcrAIR/)

## Write ups

[Blog - Security Cipher](https://securitycipher.com/blog/)[Blog - Black Hills Information Security](https://www.blackhillsinfosec.com/blog/)[All Articles - PortSwigger Research](https://portswigger.net/research/articles) ⭐ [Blog - Pentester Land](https://pentester.land/blog/) ⭐

* medium but only Cyber Security shit [InfoSec Write-ups](https://infosecwriteups.com/)⭐ [Facebook Writeups](https://github.com/jaiswalakshansh/Facebook-BugBounty-Writeups)

> \[!important] Writeups - Pentester Land ⭐

### personal writeups

[All Things Security](https://blog.dixitaditya.com/?source=top_nav_blog_home)⭐

> \[!bug] James Kettle upcoming talks & research portfolio

[Monke's Security Blog](https://web.archive.org/web/20211126224307/https://monke.ie/)[Writeups Archives - Labs Detectify](https://labs.detectify.com/category/writeups/)[Blog Posts | Corben Leo](https://corben.io/blog) ⭐ [Who Am I ? | KARIM ASHRAF SPACE.](https://karim-ashraf.gitbook.io/) ⭐ blue team defense labs [Writeups - Ahmad Halabi](https://ahmadhalabi.net/writeups/) ⭐ [justAhmed's Blog](https://justahmed.github.io/) ⭐ [Youssef Sammouda](https://ysamm.com/)⭐ [Mohamed Sayed - Blog](https://flex0geek.blogspot.com/) ⭐ [**\~/kpwn$**](https://kpwn.de/) ⭐ [Orange](https://blog-orange-tw.translate.goog/?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=wapp) ⭐ [Yassine Aboukir – Application security engineering, consulting and bug bounties](https://www.yassineaboukir.com/) ⭐

> \[!bug] Youssef Sammouda⭐

> \[!bug] POSIX ⭐ HTB

[Boschko Security Blog](https://boschko.ca/)[Vickie Li's Security Blog](https://vickieli.dev/)[home · Joseph Thacker](http://josephthacker.com/)

> \[!important] LLM Pentesting Embrace The Red · Embrace The Red

> \[!important] XSS Site Unreachable

## Tools

[jhaddix (jhaddix) / Repositories · GitHub](https://github.com/jhaddix?tab=repositories)[Xmind Share - Xmind - Mind Mapping App](https://xmind.app/share/_xmind_EhTtFcrAIR/)[offsec.tools - A vast collection of security tools](https://offsec.tools/)[tomnomnom (Tom Hudson) / Following · GitHub](https://github.com/tomnomnom?tab=following)

## Creators

[securitycreators](https://securitycreators.video/)[talks.md](https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters/blob/master/assets/talks.md#General-Bug-Bounty-Talks)

## CTFs

[CryptoCat's CTF writeups | CTF Writeups](https://crypto-cat.gitbook.io/ctf-writeups)[A guide to get started with CTFs & Hacking : r/Btechtards](https://www.reddit.com/r/Btechtards/comments/1emyf3g/a_guide_to_get_started_with_ctfs_hacking/) ⭐ [CTFtime.org / All about CTF (Capture The Flag)](https://ctftime.org/)[Bienvenue \[Root Me : plateforme d'apprentissage dédiée au Hacking et à la Sécurité de l'Information\]](https://www.root-me.org/)[picoCTF - CMU Cybersecurity Competition](https://picoctf.org/)

### Walkthroughs

[CryptoCat's CTF writeups | CTF Writeups](https://crypto-cat.gitbook.io/)

## Books

[Resources-for-Beginner-Bug-Bounty-Hunters/assets/books.md at master · nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters · GitHub](https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters/blob/master/assets/books.md)

## Programming Languages

> \[!bug] The Modern \[\[JS]] Tutorial Online Gitbook The Modern JavaScript Tutorial

## BurpSuite Plugins

* Make BurpSuite Extensions
  * [GitHub - snoopysecurity/awesome-burp-extensions: A curated list of amazingly awesome Burp Extensions](https://github.com/snoopysecurity/awesome-burp-extensions?tab=readme-ov-file#burp-extension-training-resources)
* Save Projects Extension
  * [GitHub - Sysc4ll3r/SeriaLog: SeriaLog - BurpSuite Extension for Advanced Logging and State Management](https://github.com/Sysc4ll3r/SeriaLog)
* [XSS to RCE](https://swarm.ptsecurity.com/researching-open-source-apps-for-xss-to-rce-flaws/)
* [SSRF to RCE](https://medium.com/@Land2Cyber/ssrf-to-rce-a-case-study-in-exploiting-chained-vulnerabilities-78f290ae9011)
* [XXE to RCE](https://airman604.medium.com/from-xxe-to-rce-with-php-expect-the-missing-link-a18c265ea4c7)
* [SQLI to RCE](https://aditya-chauhan17.medium.com/sql-injection-to-rce-dd538d49a7f)
* [File Upload to RCE](https://sidblog.medium.com/file-upload-to-rce-7c04b3b252de)
* [Web-Sec in Arabic](https://mohamed-ashraf.notion.site/Checklist-1527e89dd232448a9eba984592ad5f83)
