REST in Peace - Abusing GraphQL to Attack Underlying Infrastructure
Explore GraphQL security vulnerabilities, attack techniques, and protective measures. Learn to exploit implementation errors and misconfigurations in this popular API query language.
GSuite Security- Everyone Wants It but Not Everyone Gets It
Explore common GSuite misconfigurations, prevention strategies, and bug hunting techniques. Learn about private docs, Google Sites, API vulnerabilities, and more from an experienced bounty hunter.
Overview of Common Android App Vulnerabilities
Explore common Android app vulnerabilities, their detection, and remediation. Learn about Google Play's security programs and essential resources for developers to enhance app security.
Hacking SQHell from TryHackMe - SQL Injection Guide
Comprehensive guide on SQL injection techniques, covering various attack vectors and practical examples to enhance offensive security skills and understanding of database vulnerabilities.
Managing a Bug Bounty Program From a Hacker's Perspective - NahamCon 2022 EU
Insights on managing bug bounty programs from an ethical hacker's perspective, covering strategies, challenges, and best practices for effective vulnerability disclosure and collaboration.
Bug Bounty Recon Basics - Part 1
Learn essential bug bounty reconnaissance techniques, including subfinder, Google dorking, data manipulation, ASN analysis, Shodan basics, and more for effective vulnerability discovery.
Till REcollapse - Fuzzing the Web for Mysterious Bugs
Explore web fuzzing techniques for uncovering mysterious bugs with André Baptista. Learn strategies to identify impactful vulnerabilities and enhance your ethical hacking skills.
Bug Bounty, DEFCON CTF, and Smart Contracts Discussion with ret2jazzy
Insightful discussion on bug bounty programs, DEFCON CTF experiences, and smart contract security, offering valuable perspectives for cybersecurity enthusiasts and professionals.
Read The Bleeping RFC - Understanding Network Protocols for Security
Explore RFC vulnerabilities and their impact on web security with Inti De Ceukelaire. Learn to identify and exploit logic flaws in protocols for more effective bug hunting and penetration testing.
API Hacking, Car Hacking, and Content Creation for Hackers - Interview with Alissa Knight
Cybersecurity expert Alissa Knight discusses API and car hacking, content creation for hackers, and shares insights on the evolving landscape of digital security threats and strategies.
Hacking, Content Creation, and API Security with TheXSSRat
Insightful discussion on hacking, content creation, and API security with TheXSSRat. Covers career paths, learning strategies, and practical tips for aspiring cybersecurity professionals.
Hacking, Certificate Transparency, and TruffleHog - A Discussion with InsecureNature
Insightful discussion on hacking techniques, security tools, and bug bounty strategies, featuring expert insights on Certificate Transparency and TruffleHog for enhanced cybersecurity practices.
Bug Bounty Methodology and Hacking the US Government - Interview with Jack Cable
Insights from a top bug bounty hunter on hacking methodology, government cybersecurity, and career advice for aspiring ethical hackers.
Hackers Are Hijacking Websites - Subdomain and DNS Takeover
Explore website hijacking through subdomain and DNS takeovers. Learn about vulnerabilities, detection methods, and how to create proof of concepts for securing web assets.
CTF Walkthrough- Hacking An API with Snyk
Detailed walkthrough of API hacking in a Capture The Flag challenge, demonstrating practical offensive security techniques and vulnerability exploitation.
How to Identify and Exploit CVE-2021-43798 - Grafana Unauthenticated Directory Traversal
Learn to identify and exploit the Grafana CVE-2021-43798 vulnerability, including detection methods, working proof-of-concept, and practical exploitation techniques for unauthenticated directory traversal.
Advent of Cyber - Web Exploitation - Cross-Site Scripting (XSS) Explained
Comprehensive explanation of Cross-site Scripting (XSS) in web security, covering its types, risks, and prevention methods. Practical insights for ethical hackers and cybersecurity enthusiasts.
Advent of Cyber - Fuzzing with Burp Suite
Learn fuzzing techniques using Burp Suite in TryHackMe's Advent of Cyber challenge. Enhance your web application security testing skills and discover potential vulnerabilities through automated input manipulation.
Creating Wordlists for Hacking, Pentesting & Bug Bounty Hunting Using Seclists, Bigquery, and More
Learn to create effective wordlists for ethical hacking using tools like Seclists and Bigquery. Enhance your penetration testing and bug bounty hunting skills with expert techniques.
Your Guide to Burp Suite - Setup and Usage in 30 Minutes
Learn to set up and effectively use Burp Suite for web security testing in under 30 minutes, covering essential features and functionalities.
SPI Flash Extraction for Bug Bounty Hunters - LevelUpX Series 13
Hands-on guide to extracting SPI flash contents from hardware devices, focusing on techniques and tools for bug bounty hunters to uncover valuable data and impactful vulnerabilities.