Security Explained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning. Below are the various activities and formats planned under #SecurityExplained series:

1. Tweets explaining interesting security stuff
2. Blogs/Tutorials/How-To-Guides about different tools/techniques/attacks
3. Security Discussion Spaces/Meets
4. Monthly Mindmap/Mindmap based explainers for different attacks/techniques
5. My Pentesting Methodology Breakdown
6. Giveaways and Community Engagement
7. GitHub Repository to Maintain "SecurityExplained"
8. Public & Free to Access
9. Newsletter

Follow me on Twitter for Regular Updates: Harsh Bothra.

Note: Please note that this series will run on irregular scehdules and it is not necessary to produce & share content on a regular or daily basis.

Content by Harsh

---

S.No.	Topic
1	My Penetration Testing Methodology [Web]
2	FeroxBuster Explained
3	Creating Custom Wordlist for Content Discovery
4	Escalating HTML Injection to Cloud Metadata SSRF
5	Bypassing Privileges & Other Restrictions with Mass Assignment Attacks
6	Bypassing Biometrics in iOS with Objection
7	My Methodology to Test Premium Features
8	Bypassing Filters(and more) with Visual Spoofing
9	Path Traversal via File Upload
10	Attacking Zip Upload Functionality with ZipSlip Attack
11	RustScan - The Modern Port Scanner
12	Vulnerable Code Snippet - 1 (Java)
13	Vulnerable Code Snippet - 2 (JavaScript)
14	Exploiting XXE in JSON Endpoints
15	Vulnerable Code Snippet - 3 (Python)
16	Vulnerable Code Snippet - 4 (PHP)
17	Vulnerable Code Snippet - 5 (PHP)
18	Vulnerable Code Snippet - 6 (Java)
19	Vulnerable Code Snippet - 7 (PHP)
20	Vulnerable Code Snippet - 8 (Java)
21	Vulnerable Code Snippet - 9 (JavaScript)
22	Vulnerable Code Snippet - 10 (Python)
23	Vulnerable Code Snippet - 11 (PHP)
24	Vulnerable Code Snippet - 12 (JavaScript)
25	Vulnerable Code Snippet - 13 (PHP)
26	Vulnerable Code Snippet - 14 (PHP)
27	Vulnerable Code Snippet - 15 (C)
28	Vulnerable Code Snippet - 16 (PHP)
29	Vulnerable Code Snippet - 17 (Java)
30	Vulnerable Code Snippet - 18 (Python)
31	Vulnerable Code Snippet - 19 (JavaScript)
32	Account Takeover Methodology
33	Vulnerable Code Snippet - 20 (C)
34	Vulnerable Code Snippet - 21 (C#)
35	Vulnerable Code Snippet - 22 (Java)
36	Vulnerable Code Snippet - 23 (PHP)
37	Vulnerable Code Snippet - 24 (Python)
38	Vulnerable Code Snippet - 25 (Python)
39	Vulnerable Code Snippet - 26 (PHP)
40	Vulnerable Code Snippet - 27 (PHP)
41	Vulnerable Code Snippet - 28 (Golang)
42	Vulnerable Code Snippet - 29 (PHP)
43	Vulnerable Code Snippet - 30 (Python)
44	Vulnerable Code Snippet - 31 (PHP)
45	Vulnerable Code Snippet - 32 (Python)
46	Vulnerable Code Snippet - 33 (Python)
47	Vulnerable Code Snippet - 34 (Python)
48	Vulnerable Code Snippet - 35 (PHP)
49	Vulnerable Code Snippet - 36 (Java)
50	Vulnerable Code Snippet - 37 (PHP)
51	Vulnerable Code Snippet - 38 (JavaScript)
52	Vulnerable Code Snippet - 39 (PHP)
53	Vulnerable Code Snippet - 40 (C#)
54	Vulnerable Code Snippet - 41 (Java)
55	Vulnerable Code Snippet - 42 (Python)
56	Vulnerable Code Snippet - 43 (PHP)
57	Vulnerable Code Snippet - 44 (C#)
58	Vulnerable Code Snippet - 45 (Python)
59	Ruby ERB SSTI
60	Introduction to CWE
61	CWE-787: Out-of-bounds Write
62	Vulnerable Code Snippet - 46 (Python)
63	CWE-20: Improper Input Validation
64	Vulnerabilities in Cookie Based Authentication
65	How do I get Started in Cyber Security? — My Perspective & Learning Path!
66	Scope Based Recon Methodology: Exploring Tactics for Smart Recon
67	MFA Bypass Techniques
68	Vulnerable Code Snippet - 47 (PHP)
69	Vulnerable Code Snippet - 48 (PHP)
70	Vulnerable Code Snippet - 49 (PHP)
71	Vulnerable Code Snippet - 50 (PHP)
72	Vulnerable Code Snippet - 51 (PHP)
73	Vulnerable Code Snippet - 52 (PHP)
74	Vulnerable Code Snippet - 53 (PHP)
75	Vulnerable Code Snippet - 54 (JavaScript)
76	Vulnerable Code Snippet - 55 (JavaScript)
77	Vulnerable Code Snippet - 56 (JavaScript)
78	Vulnerable Code Snippet - 57 (JavaScript)
79	Vulnerable Code Snippet - 58 (JavaScript)
80	Vulnerable Code Snippet - 59 (Java)
81	Vulnerable Code Snippet - 60 (Java)
82	Vulnerable Code Snippet - 61 (Java)
83	Vulnerable Code Snippet - 62 (Java)
84	Vulnerable Code Snippet - 63 (Java)
85	Vulnerable Code Snippet - 64 (Java)
86	Vulnerable Code Snippet - 65 (Java)
87	CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
88	CWE-732: Incorrect Permission Assignment for Critical Resource
89	CWE-522: Insufficiently Protected Credentials
90	CWE-918: Server-Side Request Forgery (SSRF)
91	CWE-611: Improper Restriction of XML External Entity Reference
92	CWE-476: NULL Pointer Dereference
93	CWE-276: Incorrect Default Permissions
94	CWE-862: Missing Authorization
95	CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
96	CWE-798: Use of Hard-coded Credentials
97	CWE-287: Improper Authentication

SecurityExplained NewsLetter

---

S.No.	Topic
1	Issue-1
2	Issue-2
3	Issue-3
4	Issue-4
5	Issue-5
6	Issue-6
7	Issue-7
8	Issue-8
9	Issue-9
10	Issue-10
11	Issue-11
12	Issue-12
13	Issue-13
14	Issue-14

AskMeAnything

---

S.No.	Topic
1	AMA-1: AMA with Harsh Bothra
2	AMA-2: AMA with Six2dez
3	AMA-3: AMA with Brumens

Threads

---

S.No.	Topic
1	7 Hacking Books you must read
2	4 Subdomain Enumeration Tools you must have in your Arsenal 💻
3	6 Burp Extensions to Check for Access Control & Privilege Escalation Issues
4	5 Powerful Web Fuzzing & Content Discovery Tools You Must Know
5	17 Search Engines every Security Professional Must Know
6	7 Cyber Security Conferences Channel You Must Follow
7	9 Free Practice Labs to Master Cross-Site Scripting
8	11 MindMaps I have created that you may find useful!
9	14 Payload Repositories to find all the required Payloads & Attack Vectors

MindMaps

S.No.	Topic
1	Account Takeover Techniques
2	CWE TOP 10 (2021)