---
title: "Amr Elsagaei - Blog, page 6"
description: "Page 6 of the archive. Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be."
canonical_url: "https://amrelsagaei.com/blog/6"
meta:
  "og:description": "Page 6 of the archive. Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be."
  "og:title": "Amr Elsagaei - Blog, page 6"
---

# Blog

Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be.

- ## [🚀 Automate Advanced XSS with XSStrike and Dalfox ⚙️](https://amrelsagaei.com/automate-advanced-xss-with-xsstrike-and-dalfox)

  Automating XSS discovery with XSStrike and Dalfox, from install through real usage against labs, combined with Burp Suite for deeper testing.
- ## [🔥 Automating Advanced SQL Injection with Ghauri!💻🛡️](https://amrelsagaei.com/automating-advanced-sql-injection-with-ghauri)

  How to install and use Ghauri to automate advanced SQL injection detection and exploitation, and how it compares to the tools you already know.
- ## [🤖 iRobot | Live Bug Bounty Hunting 🕵️‍♂️](https://amrelsagaei.com/irobot-live-bug-bounty-hunting)

  A live walkthrough of iRobot's public Bugcrowd program with Burp Suite, showing practical techniques for finding and reporting real vulnerabilities.
- ## [Live Bug Bounty Hunting 🐛💵](https://amrelsagaei.com/live-bug-bounty-hunting)

  A full live hunting walkthrough: Google dorking, subdomain discovery, URL collection and analysis, Nuclei scanning, XSS automation and LFI detection.
- ## [Create Your BlackHatChat RIGHT NOW! 🚀🌐](https://amrelsagaei.com/create-your-blackhatchat-right-now)

  Set up your own private dark web chat room with the LE CHAT repository, Apache, MySQL and Tor, with no JavaScript required.
- ## [Discover Hidden Parameters for Web App Vulnerabilities 🔍🕵️‍♂️](https://amrelsagaei.com/discover-hidden-parameters-for-web-app-vulnerabilities)

  Find undocumented parameters in web applications using Arjun and Waybackurls, and turn those hidden inputs into real attack surface.
- ## [SegFault: Your Ultimate Cybersecurity Workspace 🌐🔒](https://amrelsagaei.com/segfault-your-ultimate-cybersecurity-workspace)

  SegFault gives you a free root server in a virtual environment over SSH, with Kali tooling, VPN-routed egress, transparent Tor, port forwarding and proxies.
- ## [Unveiling Hidden URLs - Web Enumeration with Hakrawler](https://amrelsagaei.com/unveiling-hidden-urls-web-enumeration-with-hakrawler)

  Hakrawler crawls a target for subdomains, paths and other signals. Installing it via Go, Docker or apt, and using it to map a site's real attack surface.
- ## [Empower Your Command-Line Experience with AI Precision](https://amrelsagaei.com/empower-your-command-line-experience-with-ai-precision)

  ShellGPT brings a large language model into your terminal. Installation, chat mode, code generation and running system commands with AI assistance.

## Sitemap

See the full [sitemap](/sitemap.md) for all pages.