In today’s digital world, software and web applications are everywhere. But with convenience comes risks. Cyber attackers are always looking for weak points to exploit. That’s where the OWASP Top 10 vulnerabilities come in — a list that shows common security risks web apps face. …

In this article, I’m going to share linux most used commands based on my experience. I’m going too list down the most used commands in unix terminal that I often use it. Commands name would be listed in this article with its meaning, use case, example and syntax each. ls …

Hello, Shubham Dhungana, this side. This article will be showcasing the essential tools required for bug bounty hunting, web application hacking and other penetration testing essential needed tool. These tools are very essential for web application hacking. These tools are equally important while doing bug bounty hunting. There are different…

Web application security testing, also known as VAPT (Vulnerability Assessment and Penetration Testing), plays a crucial role in ensuring the security of online systems. As a web application security enthusiast, I follow a systematic approach that combines various techniques and tools to identify vulnerabilities and potential exploits. …

In this article, I share my journey of developing DeepSubh, a powerful subdomain enumeration automation script that does subdomain enumeration upto 4th level deeper. Generally we ignore deeper level subdomain enumeration while doing vapt stuffs or bug bounty. But, it is one of the important phase to find hidden endpoints…

Built my automation recon script tool for web application hacking & reconnaissance tasks which I am going to share. I found these codes and tool extremely useful and time saving. I’m going to share the chunks of code that I wrote to create this tool which helped me for my…

Below cheat sheet commands are useful for finding bugs in web application. These are especially used by bug bounty hunters for finding vulnerabilities in web application. Many cyber security enthusiasts especially relating to bug bounty and penetration testing domain get confused in beginning phase to get started. These are the…

In this article, I’m going to document about the process to perform web application reconnaissance. Before reading this article, we must keep in mind that this is not the absolute all in one guide for web application reconnaissance. Yet, there are many ways for web application reconnaissance in cyber security…

Take your time and start learning from these Resources. Whether you’re at Beginner’s Level or Intermediate Level or Pro, It’ll guide you as your master. Pick one resource link from this article from time to time and start learning. There’s no compulsion that you should learn all in order. …