SecurityTips

This repo contains full collection of HackerScrolls tips.

Socials:

• Burp Suite
  • Bruteforce Basic Auth
  • Effective Search
  • Intruder Server Response time
  • Match Replace: Hidden Elements
  • Match Replace: Hidden Interface
  • Match Replace: IDORs
  • Show All HTML Comments
• Mindmaps
  • Testing 2FA
  • Testing OAuth
  • Testing SSRF
  • Testing file upload
  • iOS Security
  • iOS for Bug Bounty
• Misc
  • Multiple Firefox Accounts for Testing Roles
  • 6 One Line Simple Servers
  • Remove Noisy Firefox Telemetry
• Mobile
  • 4 Ways to MiTM Android App
  • MiTM Android via DNS
  • MiTM Android via IPTABLES
  • SSL Unpinning Trick
  • Suitable Android Versions
  • 4 Ways to Extract APK
  • Exported Activities Tricks
• Passwords
  • Password Spraying
  • Password Dictionaries - Weakpass
• Red Team and Penetration Testing
  • Cisco Smart Install
  • Gateway Finder
  • Sniffing SSH Passwords with 3Snake
  • Tunneling TCP Over DNS
  • SOCKS to the internal server - frp proxy
• Recon
  • Dirsearch by Temp Extensions
  • Find IP Behind Cloud Firewall 1
  • Find IP Behind Cloud Firewall 2
  • Expanding Scope with bgp.he.net
  • Waybackurls
• Web
  • CORS
    • Bypassing Allowed Domains List
    • Chrome Cache Trick
    • null Origin
  • Common CSRF bypasses
  • Monitor Changes in JS
  • Monitor Changes in JS
  • SameSite
    • Samesite Bypass - Chrome 120 secs Trick
    • SameSite Common Info
    • Different SameSite Cookies Behavior in Browsers
  • Testing SQL Syntax in SQLFiddle
  • WebSocket Hijacking
  • XSS
    • Encoding JS in HTML Tags
    • Mutation points in HTML Tags
    • Upgrading Self XSS
  • Bypassing 403 Restriction
  • Insecure Deserialization
  • SSRF via PDF/Image Rendering
  • Mass Assignment and Autobinding