Web Security | Bug hunting

https://steve-s.gitbook.io/0xtriboulet/archive/notice/just-malicious/from-c-with-inline-assembly-to-shellcode

https://0xn3va.gitbook.io/cheat-sheets

https://boom-stinger-c76.notion.site/AuthC-Under-Siege-Innovative-Approaches-to-Penetrate-Authentication-Across-All-Layers-12b53b6a0d6e806486f9ffb2150003e4

https://scriptjacker.in/blogs/Hyperlink-Injection-Bypass/

https://labs.detectify.com/security-guidance/ssrf-vulnerabilities-and-where-to-find-them/

We lost a great friend, a talented information security researcher two days ago. I hope you remember him in your prayers and contribute to spreading his articles so that his memory may endure. https://lynguist0.medium.com/

https://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com

https://seth0x41.github.io/2023/12/24/jwt-attacks

https://rafa.hashnode.dev/exploiting-http-parsers-inconsistencies

https://www.sonarsource.com/blog/vscode-security-markdown-vulnerabilities-in-extensions

https://medium.com/@salman_bugskipper/1-250-worth-of-host-header-injection-96563a2ac7e8

https://blog.voorivex.team/9240-bounty-in-30-days-hunt-challenge

https://neupanemizzle.medium.com/server-side-template-injection-leading-to-rce-on-google-vrp-75f0a4bc6ebc

https://www.sonarsource.com/blog/code-vulnerabilities-leak-emails-in-proton-mail/

https://www.youtube.com/watch?v=90AdmqqPo1Y

https://waf-bypass.com/

https://medium.com/@moon_osint/how-to-find-the-administrator-of-an-onion-site-89d176b0061a

https://infosecwriteups.com/how-i-escalated-a-time-based-sql-injection-to-rce-bbf0d68cb398

https://portswigger.net/research/server-side-prototype-pollution

https://bugbountyguide.org/wp-content/uploads/2023/08/hackerone-Reports.pdf