↓ Skip to main content

Tags

102 tags across 39 posts, grouped by what kind of thing they are

Vulnerability classes

Information disclosure6 Stored XSS6 Reflected XSS5 File upload4 Exposed credentials3 RCE3 Default credentials2 Privilege escalation2 Business logic flaw1 DOM XSS1 HTTP parameter pollution1 JNDI injection1 Open redirect1 Path traversal1 Self-XSS1 SQL injection1

Techniques

Context breakout4 img onerror4 Filter bypass3 Subdomain enumeration3 Attribute injection2 Port scanning2 Second-order delivery2 URL parsing2 Anti-debugging1 Certificate pinning bypass1 Lookalike domain1 Netblock enumeration1 Parser differential1 Phishing1 Screenshotting1 SSH brute force1 URL fragment1 XHTML namespace1

Technologies and tools

AI15 Burp Suite2 Apache Tomcat2 WordPress2 Aquatone1 binwalk1 Frida1 GDB1 JFFS21 John the Ripper1 Jolokia1 Kippo1 LLDB1 phpinfo()1 Spotlight1 XML1

Platforms

Linux3 Java2 macOS2 PHP2 Android1 iOS1

Disclosure and practice

Opinion4 Vendor response4 Coordinated disclosure3 CERT coordination1 Government websites1 Honeypot1

Other

Openclaw9 Bug-Bounty5 Claude5 Hackerone4 Mcp4 H1-Brain3 Security3 Docker2 Email2 Gmail2 Telegram2 Triage2 Workflow2 Agent-Alignment1 Agent-Safety1 Agent-Tools1 Agentic-Ai1 Anthropic1 Arm641 Bugcrowd1 Configuration1 Cvss1 Defense-in-Depth1 Google-Cloud1 Guardrails1 Hetzner1 Intigriti1 Knowledge-Base1 Nginx1 Nodejs1 Oauth1 Oauth21 Obsidian1 Pentesting1 Productivity1 Prompt-Engineering1 Self-Hosting1 Soul-Md1 Sync1 Websocket1