Welcome to my Application Security (AppSec) and Bug Bounty knowledge base. This repository serves as a structured collection of research notes, methodologies, and vulnerability analyses gathered during security assessments and educational studies.
- vulnerabilities/: Contains detailed technical notes and exploitation techniques for various web vulnerabilities, including Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), SQL Injection (SQLi), and XML External Entity (XXE) injection.
- resources/: A curated list of reference materials, testing checklists, and essential tools utilized during web application penetration testing.
The primary goal of this repository is to systematize knowledge on identifying and mitigating security flaws in web applications. All materials are strictly intended for educational purposes and authorized security assessments.
Disclaimer: The information provided in this repository should only be used on systems where you have explicit permission to test.