Account Takeover Methodology

Application Level DoS Methods

2FA Bypasses

OTP Bypass

Broken-Link Hijacking

Session Based Bugs

Wordpress

Moodle

CORS

CORS Bypasses

CSRF

CSRF Bypass

CVES

Web Application Pentesting Checklist

Web Checklist by Chintan Gurjar.pdf

Mindmap by Rohit Gautam

Mindmap by Cristian Cornea

Web Page Code Review Tips

EXIF Geo Data Not Stripped

File Upload Bypass

Find Origin

GraphQL

HTTP_Desync

Host-Header

HTML-Injection

IDOR

JWT

MFA Bypasses

2FA-Bypass

Default Credential And Admin Panel

Find OpenRedirect Trick

Open Redirection Bypass

Parameter Pollution In Social Sharing Buttons

MindMap

Password Reset Token Leakage

Account_Takeover_By_Password_Reset_Functionality

Rate-Limit Bypass

Recon Workflow

Subdomain Enumeration

SQL Injection.md

SSRF

Blind SSRF

SSTI

Sign Up Bugs

Sign Up MindMap

Github Recon Method

Github-Dorks

Github Dorks All

Google Dorks

Shodan CVE Dorks

Status_Code_Bypass Tips

403 Bypass

Subdomain Takeover - Detail Method

Subdomain Takeover - Easy Method

Tabnabbing

WAF Bypass Using Headers

Weak Password Policy

XSS

Automated XSS

XXE Methods