CIA Lock Picking Field Operative Training Manual archive.org

Guidebook covering terminology, tool use, and techniques for picking the vast majority of pin and wafer tumbler locks.

Expedient B and E: Tactics and Techniques for Bypassing Alarms and Defeating Locks - Carl Hammer amazon.com

SecuriTool securitool.js.org

State of TLS on the public web securemonk.io

XXE in WeChat Pay Sdk ( WeChat leave a backdoor on merchant websites) seclists.org

Finding The Real Origin IPs Hiding Behind CloudFlare or TOR secjuice.com

Stored XSS, and SSRF in Google using the Dataset Publishing Language s1gnalcha0s.github.io

Open Redirect Vulnerability s0cket7.com

PENETRATION TESTING AWS STORAGE: KICKING THE S3 BUCKET rhinosecuritylabs.com

Common Azure Security Vulnerabilities and Misconfigurations rhinosecuritylabs.com

Cloud Security Risks (Part 1): Azure CSV Injection Vulnerability rhinosecuritylabs.com

Reddit reddit.com

Rails SQL Injection rails-sqli.org

Brute Forcing Your Facebook Email and Phone Number pwndizzle.blogspot.jp

SQL INJECTION AND POSTGRES - AN ADVENTURE TO EVENTUAL RCE pulsesecurity.co.nz

Introduction to OAuth 2.0 and OpenID Connect pragmaticwebsecurity.com

The Next.js security-headers pitfall poszo.com

XML external entity (XXE) injection portswigger.net

XSS without HTML: Client-Side Template Injection with AngularJS portswigger.net

JSON hijacking for the modern web portswigger.net

DOM based Angular sandbox escapes portswigger.net

The Daily Swig - Web security digest portswigger.net

XSS without parentheses and semi-colons portswigger.net

Practical Web Cache Poisoning portswigger.net

Evading CSP with DOM-based dangling markup portswigger.net

Bypassing Web Cache Poisoning Countermeasures portswigger.net

Phrack Magazine phrack.org

XXE phonexicum.github.io

GraphQL NoSQL Injection Through JSON Types petecorey.com

peoplefindThor peoplefindthor.dk

List of bug bounty writeups pentester.land

NFS | PENETRATION TESTING ACADEMY pentestacademy.wordpress.com

How to exploit the DotNetNuke Cookie Deserialization pentest-tools.com

THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS paulosyibelo.com

TWITTER XSS + CSP BYPASS paulosyibelo.com

WebLogic RCE (CVE-2019-2725) Debug Diary paper.seebug.org

Blog of Osanda osandamalith.com

Escape and Evasion Egressing Restricted Networks optiv.com

Exploiting Node.js deserialization bug for Remote Code Execution opsecx.com

Into the Borg – SSRF inside Google production network opnsec.com

Stored XSS on Facebook opnsec.com

OpnSec opnsec.com

OpenBuckets openbuckets.io

NSFOCUS nti.nsfocus.com

Some Problems Of URLs noncombatant.org

CSV Injection -> Meterpreter on Pornhub news.webamooz.com

SQL Injection Cheat Sheet netsparker.com

Web Application Security Zone by Netsparker netsparker.com

ModSecurity / OWASP ModSecurity Core Rule Set netnea.com

n0tr00t n0tr00t.com