Learn to Hack
  • Introduction
    • 💀whoami
    • Writeups
      • What happens when you request a website?
      • What is bug bounty methodology?
      • Reverse Engineer an API
      • How to discover websites which got recently available on internet?
  • Where to Start?
    • Learn to hack
    • Web Basics
    • HTTP Basics
    • Networking Basics
    • Linux Basics
    • Programming Basics
    • Hacking and its types
    • Phases of hacking
    • Bug Bounty
      • Public bug bounty programs
      • Bug Bounty Methodologies
  • Learn Hacking
    • Platforms to learn hacking
    • Courses for hacking and cybersecurity
    • Youtube Channels CyberSecurity
    • Bug Bounty Writeups
    • Security Books
    • Security Blogs
    • Security News
  • Practice Hacking
    • Practice hacking skills
  • Security Bugs
    • GQL GraphQL
    • Exploit Payment Gateways
    • Unrestricted File Upload
      • Real world report PoCs
    • XSS Cross Site Scripting
      • XSS discovery using dalfox, waybackurls, gau
      • Real world report PoCs
    • CSRF Cross Site Request Forgery
      • Real world reports PoCs
    • SSRF Server Side Request Forgery
      • SSRF Bypass via OpenRedirect
      • SSRF hunt with httpx & aquatone
      • Real world report PoCs
    • BAC Broken Access Control
    • BOLA Broken Object Level Authorization
    • SQLi SQL Injection
      • Real world report PoCs
    • RCE Remote Code Execution
      • Real world report PoCs
    • IDOR Insecure Direct Object Reference
      • Real world report PoCs
  • Security Tools
    • Recon
      • Subdomain Enumeration
      • Port Scanning
      • Screenshots
      • Identify Technologies
      • Content Discovery
      • Find Links
      • Parameters
      • Fuzzing
    • Exploitation
      • Command Injection
      • CORS Misconfiguration
      • CRLF Injection
      • CSRF Injection
      • Directory Traversal
      • File Inclusion
      • GraphQL Injection
      • Header Injection
      • Insecure Deserialization
      • Insecure Direct Object Reference
      • Open Redirect
      • Race Condition
      • Request Smuggling
      • SSRF Server Side Request Forgery
      • SQLi SQL Injection
      • XSS Cross Site Scripting
      • XXE Injection
    • Setup Burp Collaborator Server
    • Miscellaneous
      • Passwords
      • Secrets
      • Git
      • Buckets
      • CMS
      • JSON Web Token
      • post Message
      • Subdomain Takeover
      • Vulnerability Scanners
      • More tools
  • Security Verification Standards
    • ASVS Application Security Verification Standard
    • MASVS Mobile Application Security Verification Standard
  • Security Testing Guides
    • Rest API Security Checklist
    • Web Application Testing Techniques
    • Web Security Testing Guide
    • Mobile Security Testing Guide
  • Security findings
    • Security Articles
  • Special Thanks
Powered by GitBook
On this page

💀whoami

Hi all, this is AK and I'm going to share my security experience and learnings with you all here in this book.

NextWriteups

Last updated 1 year ago

Introduction:

Name: Syed Muhammad Abdul Karim Education: BSE & MSE (Software Engineering) Location: Pakistan Designation: Application Security Engineer Company: Securiti.Ai I am passionate about information security, love to read about real world hacks and I love to break logics. I hold a 5 year experience of bug bounty hunting. In my free time I read about cyber attacks, cyber security articles, publicly disclosed hacker's report etc. Exploring the web apps is what I do in my testing but when I'm not working I explore new places that are fulfilled with nature or food with a great ambiance. I'm hoping that you will learn new things from my experiences that is why I am compiling this book. I'll share all what I have in my bag, all the resources I use and all the tools I use in my daily life. I'm really thankful to all the people who are helping the community by writing articles, easy to use CLI tools, researching and finding new CVEs, creating video based content over youtube etc.

Contact me: Linkedin: https://www.linkedin.com/in/syedmuhammadabdulkarim/ Twitter: https://twitter.com/akarimsays Disclaimer: I will be sharing my writeup, tips and tricks here in this book. But All of these resources attached in the book in form of articles, tools, videos etc are the ones I use for my learning except a few that are my writeups. Compiling them to play my part for the lovely info sec community out there. If you want to get your content tools featured here please contact me on Twitter or Linkedin.

🇵🇰
Page cover image