🚀 Automate Advanced XSS with XSStrike and Dalfox ⚙️
Automating XSS discovery with XSStrike and Dalfox, from install through real usage against labs, combined with Burp Suite for deeper testing.
Blog
Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be.
🔥 Automating Advanced SQL Injection with Ghauri!💻🛡️
How to install and use Ghauri to automate advanced SQL injection detection and exploitation, and how it compares to the tools you already know.
🤖 iRobot | Live Bug Bounty Hunting 🕵️♂️
A live walkthrough of iRobot's public Bugcrowd program with Burp Suite, showing practical techniques for finding and reporting real vulnerabilities.
Live Bug Bounty Hunting 🐛💵
A full live hunting walkthrough: Google dorking, subdomain discovery, URL collection and analysis, Nuclei scanning, XSS automation and LFI detection.
Create Your BlackHatChat RIGHT NOW! 🚀🌐
Set up your own private dark web chat room with the LE CHAT repository, Apache, MySQL and Tor, with no JavaScript required.
Discover Hidden Parameters for Web App Vulnerabilities 🔍🕵️♂️
Find undocumented parameters in web applications using Arjun and Waybackurls, and turn those hidden inputs into real attack surface.
SegFault: Your Ultimate Cybersecurity Workspace 🌐🔒
SegFault gives you a free root server in a virtual environment over SSH, with Kali tooling, VPN-routed egress, transparent Tor, port forwarding and proxies.
Unveiling Hidden URLs - Web Enumeration with Hakrawler
Hakrawler crawls a target for subdomains, paths and other signals. Installing it via Go, Docker or apt, and using it to map a site's real attack surface.
Empower Your Command-Line Experience with AI Precision
ShellGPT brings a large language model into your terminal. Installation, chat mode, code generation and running system commands with AI assistance.