TL;DR : A page on domain manager.paypal.com was vulnerable to “Expression Language Injection” (JSTL) and I was able to extract some…

Hi Guys,

MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now

It all started in month of August when I reached out to Gerben Javado regarding a question, yes it was a basic question but a quick chat…

When doing penetrating on this target, I collaborated with YoKo Kho to get the highest privileges. In this paper you may find a little…

welcome my brothers and friends.

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack - incredibleindishell/SSRF_Vulnerable_Lab

MarkInfo: Mark Sensitive Information (highlight color) 停止维护 - gh0stkey/BurpSuite-Extender-MarkInfo

A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248. - capt-meelo/Telewreck

A curated list of awesome forensic analysis tools and resources - ydkhatri/awesome-forensics

Hello All While I was doing penteration testing on private program , I found a page that uses oracle product .

Yesterday, a new version of DOMPurify (very popular XSS sanitization library) was released, that fixed a bypass reported by us. In this post I’ll show how exactly the bypass looked like preceded by general information about DOMPurify and how it works. If…

In this methodology I've specified a way to exploit SSTI where traditional methods of exploitation failed.

When doing penetrating on this target, I collaborated with YoKo Kho to get the highest privileges. In this paper you may find a little…

Before using Emagnet, please remember that with great power comes great responsibility. - wuseman/EMAGNET

What is pen testing? Penetration testing [ Pen Test] is a test performed by ethical hackers to determine if a system is vulnerable to attacks. In other words if the tested systems defenses were enough and which defenses the test overcome. Majority of pros…

Top 100 Hacking & Security E-Books (Free Download) - GitHub - yeahhub/Hacking-Security-Ebooks: Top 100 Hacking & Security E-Books (Free Download)