https://thexssrat.medium.com/broken-access-control-beyond-the-basics-6e15078392b72021-07-08monthly1.0 https://thexssrat.medium.com/owasp-mobile-top-10-m2-2016-insecure-data-storage-ecd4c559e2402021-07-03monthly1.0 https://thexssrat.medium.com/a-hunters-methodology-v5-0-4f52c7744d322022-06-13monthly1.0 https://thexssrat.medium.com/thank-you-dear-friend-3-3-bd216f309c5a2022-06-08monthly0.2 https://thexssrat.medium.com/setting-up-burp-suite-b0a6767d34082022-06-08monthly1.0 https://thexssrat.medium.com/resources-to-train-an-amazing-hacker-part-3-tools-4ff7b552f17e2021-07-21monthly1.0 https://thexssrat.medium.com/the-features-of-a-waf-how-to-hack-it-6da50239dd2f2021-08-06monthly1.0 https://thexssrat.medium.com/how-performance-testing-and-pentesting-go-hand-in-hand-sometimes-8c26e0655ada2021-07-30monthly0.7 https://thexssrat.medium.com/rest-api-goat-project-hacking-while-chaining-postman-into-burp-suite-46fb4988e102021-08-28monthly1.0 https://thexssrat.medium.com/https-gist-github-com-the-xss-rat-1dbb339c33a4b74758c9d449262932a3-ea588d9b2f492021-08-25monthly0.5 https://thexssrat.medium.com/lets-build-an-api-to-hack-part-5-emulating-login-and-hacking-it-with-postman-4afb292795072021-08-24monthly1.0 https://thexssrat.medium.com/lets-build-an-api-to-hack-part-4-mass-assignment-fe403e9a4a962021-08-21monthly1.0 https://thexssrat.medium.com/dont-let-hacking-become-a-drag-a454c0d60a1e2020-10-31monthly1.0 https://thexssrat.medium.com/about2026-04-14weekly1.0 https://thexssrat.medium.com2026-04-14weekly1.0 https://thexssrat.medium.com/top-3-bug-bounty-platforms-that-are-less-crowded-63c61c6397d72020-10-28monthly1.0 https://thexssrat.medium.com/doing-wizardry-with-burp-suite-proxy-options-d32a75c86a602021-03-11monthly1.0 https://thexssrat.medium.com/ultimate-xxe-beginner-guide-f3bd123b1f4a2021-03-06monthly1.0 https://thexssrat.medium.com/how-i-got-from-0-knowledge-to-where-i-am-today-94782cb261042021-04-20monthly1.0 https://thexssrat.medium.com/what-the-heck-is-information-disclosure-b1b4e8efa2232021-04-18monthly1.0 https://thexssrat.medium.com/directory-brute-forcing-beyond-the-basics-82f404e3886b2021-04-14monthly1.0 https://thexssrat.medium.com/digging-deep-into-dom-xss-9ed1728764772021-04-11monthly1.0 https://thexssrat.medium.com/bug-bounty-recon-tools-and-resources-903f52318f5c2021-04-11monthly1.0 https://thexssrat.medium.com/subdomain-flyover-and-manual-exploration-of-the-results-15c69d5090912021-04-07monthly1.0 https://thexssrat.medium.com/bug-bounty-methodology-v3-0-hunt-like-a-rat-9e030fc543632021-05-27monthly1.0 https://thexssrat.medium.com/waf-bypass-checklist-ad615dfa7cfc2021-05-19monthly1.0 https://thexssrat.medium.com/resources-to-train-an-amazing-hacker-part-1-da7c048617042021-07-01monthly1.0 https://thexssrat.medium.com/search-engine-hacking-5a5a819c55d12021-06-26monthly1.0 https://thexssrat.medium.com/burp-suite-test-how-well-do-you-know-burp-f54d6ba3a9df2021-09-25monthly0.7 https://thexssrat.medium.com/the-key-problem-factors-every-web-application-faces-60825216f9d42021-09-24monthly1.0 https://thexssrat.medium.com/aws-waf-analysis-how-it-works-and-how-to-attack-it-8a456e561c742021-09-22monthly1.0 https://thexssrat.medium.com/leveraging-reflected-xss-8125cb0109882021-10-25monthly1.0 https://thexssrat.medium.com/open-redirects-easy-to-detect-hard-to-fix-8eb535611cd42021-12-10monthly1.0 https://thexssrat.medium.com/do-you-have-these-dangerous-http-methods-enabled-on-your-server-4646b26e93922022-01-11monthly1.0 https://thexssrat.medium.com/is-your-toaster-keeping-you-up-at-night-owasp-2014-i1-insecure-web-interface-bb7c99d787102022-01-31monthly0.7 https://thexssrat.medium.com/hello-friend-64fab4c6f41c2022-01-28monthly0.5 https://thexssrat.medium.com/csp-headers-exercises-and-brainteasers-64470f3ab13d2022-01-26monthly0.7 https://thexssrat.medium.com/how-docker-can-help-you-become-a-better-hacker-c799cd38382022-01-27monthly1.0 https://thexssrat.medium.com/x-xss-protection-headers-protection-or-vulnerability-bc72139513202022-03-16monthly1.0 https://thexssrat.medium.com/how-to-handle-failure-c36a522bdaa42020-12-11monthly0.7 https://thexssrat.medium.com/idors-what-are-they-and-how-do-you-test-for-them-885c9df4af362020-11-26monthly1.0 https://thexssrat.medium.com/bug-bounty-methodology-csrf-1988d1f512b02020-11-22monthly1.0 https://thexssrat.medium.com/getting-started-in-bug-bounties-basic-strategy-e592fb5520042020-11-22monthly1.0 https://thexssrat.medium.com/burp-suite-match-and-replace-babac6415cad2021-04-06monthly1.0 https://thexssrat.medium.com/i-felt-like-there-were-no-more-bugs-left-after-winning-2000-but-an-email-worth-750-changed-my-c7a5076490602021-03-29monthly1.0 https://thexssrat.medium.com/poc-the-easiest-125-euros-i-ever-made-4dc87f01e2862021-03-25monthly1.0 https://thexssrat.medium.com/using-burp-suite-to-bypass-2fa-practical-guide-ba628bcae90c2021-03-24monthly1.0 https://thexssrat.medium.com/thank-you-friend-d-3-really-appriciate-the-feedback-8e57ed6a55922021-03-22monthly0.2 https://thexssrat.medium.com/should-i-buy-portswigger-burp-suite-proffesional-edition-as-a-bug-bounty-hunter-5ea0ce92d1362021-03-14monthly1.0 https://thexssrat.medium.com/my-name-is-wesley-and-i-think-you-need-to-read-this-90de64efe4092021-05-09monthly1.0 https://thexssrat.medium.com/xss-made-easy-for-testers-developers-and-managers-b404f744ec6b2021-05-05monthly1.0 https://thexssrat.medium.com/what-the-fuzz-the-truth-behind-content-discovery-77cd0c0756e72021-05-04monthly1.0 https://thexssrat.medium.com/how-much-pain-is-too-much-ad00d65b1b242021-05-02monthly0.7 https://thexssrat.medium.com/installing-the-dvwa-to-try-hacking-on-57f2605e8f602021-06-10monthly1.0 https://thexssrat.medium.com/q-a-with-an-amazing-hacker-ba30dd2fae62021-09-29monthly1.0 https://thexssrat.medium.com/the-boring-side-of-testing-people-should-be-talking-about-more-98907b26e78a2021-09-28monthly0.7 https://thexssrat.medium.com/resources-to-help-make-you-a-better-hacker-304ad170afd32021-10-10monthly1.0 https://thexssrat.medium.com/the-hidden-mysteries-of-the-burp-suite-proxy-tab-14674420adb12021-11-07monthly1.0 https://thexssrat.medium.com/do-not-make-this-mistake-when-it-comes-to-passive-information-gathering-c85ffef69fac2021-11-05monthly1.0 https://thexssrat.medium.com/what-to-do-if-you-cant-find-internships-26c4ed3a52542021-12-01monthly1.0 https://thexssrat.medium.com/assignment-xss-filters-build-your-own-5bb4cad6d46d2021-11-29monthly1.0 https://thexssrat.medium.com/hack-your-own-jwt-implementation-1d9dd4315de52021-12-21monthly1.0 https://thexssrat.medium.com/you-should-put-scope-over-exploits-or-should-you-e7a083538e252022-05-05monthly0.7 https://thexssrat.medium.com/uncle-rats-talks-about-knoxss-70c756f799fa2021-09-04monthly1.0 https://thexssrat.medium.com/i-let-automation-hack-for-me-here-is-what-i-learned-b1476a2c64322021-11-25monthly1.0 https://thexssrat.medium.com/getting-a-foothold-an-attack-plan-444dfc5f21332021-11-20monthly1.0 https://thexssrat.medium.com/how-to-get-into-bug-bounties-a-list-of-resources-by-the-xss-rat-4ad10dacd9662022-02-14monthly1.0 https://thexssrat.medium.com/001-defining-what-a-pentest-is-3cd32446c9cb2022-04-25monthly0.7 https://thexssrat.medium.com/002-test-plan-template-af07acd8f6e2022-04-25monthly1.0 https://thexssrat.medium.com/why-you-should-start-caring-about-idors-98f55be398d52022-09-25monthly1.0 https://thexssrat.medium.com/timeline-transitioning-from-programmer-to-pentester-8ed303f997942023-02-23monthly0.7 https://thexssrat.medium.com/heres-how-to-optimally-prepare-for-oscp-24a73127c3592023-02-20monthly1.0 https://thexssrat.medium.com/level-up-your-cybersecurity-game-100-places-to-hone-your-ethical-hacking-skills-6650aa45c3b32023-02-19monthly1.0 https://thexssrat.medium.com/what-we-can-learn-from-mr-robot-cybersecurity-lessons-from-a-tv-show-461213e07cc72023-02-19monthly1.0 https://thexssrat.medium.com/an-overview-of-the-cybersecurity-certification-landscape-ac9e7b2c40612023-03-05monthly1.0 https://thexssrat.medium.com/understanding-the-owasp-api-top-10-2023-key-risks-and-mitigation-strategies-ff9770016e0c2023-03-05monthly1.0 https://thexssrat.medium.com/bypassing-certificate-pinning-with-frida-and-objection-a-step-by-step-guide-def19bb2c8802023-03-16monthly1.0 https://thexssrat.medium.com/setting-up-your-own-lab-for-ethical-android-hacking-a-comprehensive-guide-f0519e9abb492023-03-16monthly1.0 https://thexssrat.medium.com/nail-your-oscp-exam-in-2023-92fc0f2530352023-03-10monthly1.0 https://thexssrat.medium.com/roadmap-from-programmer-to-bug-bounties-29b73e6b0c7b2023-04-03monthly1.0 https://thexssrat.medium.com/top-10-best-free-burp-suite-extensions-a2bd85c6c3b92023-04-02monthly1.0 https://thexssrat.medium.com/the-certifications-of-the-cybersecurity-landscape-in-2023-98f07b6ddc7b2023-03-29monthly1.0 https://thexssrat.medium.com/the-power-of-chaining-ethical-hacking-tools-such-as-burp-suite-owasp-zap-sqlmap-and-others-f11219fd1c962023-05-23monthly1.0 https://thexssrat.medium.com/picking-the-right-bug-bounty-program-exploring-targets-and-platforms-62248ca73d202023-05-22monthly1.0 https://thexssrat.medium.com/top-15-tips-for-getting-into-cybersecurity-c368756a91612023-12-28monthly0.7 https://thexssrat.medium.com/hacking-the-butler-jenkins-hacking-101-e437ed5574602024-09-23monthly0.7 https://thexssrat.medium.com/using-any-run-75c94004edfb2024-11-21monthly0.7 https://thexssrat.medium.com/breaking-into-bug-bounties-a-guide-to-hunting-business-logic-and-bac-vulnerabilities-in-b2b-58a8f4a897112024-11-18monthly1.0 https://thexssrat.medium.com/the-ultimate-checklist-for-detecting-idor-and-broken-access-control-vulnerabilities-b1585dd4e9992024-12-25monthly1.0 https://thexssrat.medium.com/very-basic-beginner-bug-bounty-methodology-practical-tips-and-techniques-for-web-apps-3cf9104e7f502024-12-23monthly1.0 https://thexssrat.medium.com/100-cli-flags-and-tricks-every-bug-bounty-hunter-should-know-9598139920772024-12-23monthly0.7 https://thexssrat.medium.com/the-origins-of-xss-cross-site-scripting-628dde3ac4b62025-05-20monthly1.0 https://thexssrat.medium.com/how-to-get-into-bug-bounties-a-list-of-resources-v2-0-f01eb6bef0e42025-06-11monthly0.7 https://thexssrat.medium.com/i-can-hack-so-why-cant-i-do-bounties-5e0cd09486c42025-07-27monthly1.0 https://thexssrat.medium.com/the-professionals-playbook-25-rules-for-the-bug-bounty-grind-d3612b139c892026-01-30monthly0.7 https://thexssrat.medium.com/uncle-rats-bug-bounty-methdology-2026-version-65c88af2cbe62026-04-14daily0.7 https://thexssrat.medium.com/miniseries-xss-to-the-core-pt-2-94af9da86d432022-05-23monthly1.0 https://thexssrat.medium.com/miniseries-xss-to-the-core-pt-1-4a979b9e51392022-05-22monthly1.0 https://thexssrat.medium.com/how-forgot-password-can-cost-you-your-account-2647454258da2022-05-21monthly1.0 https://thexssrat.medium.com/how-do-you-write-a-report-f9e619e196912022-05-21monthly1.0 https://thexssrat.medium.com/burp-suite-do-i-need-the-professional-edition-bf8c87ce236e2022-06-03monthly1.0 https://thexssrat.medium.com/basic-xss-bypasses-c38226fb74bf2022-06-24monthly1.0 https://thexssrat.medium.com/what-pentesting-methodology-should-you-go-with-97f1ab771be42022-08-26monthly1.0 https://thexssrat.medium.com/we-should-encourage-gender-diversity-in-cybersecurity-6d3f4dd6e6e32023-01-03monthly0.7 https://thexssrat.medium.com/the-three-main-types-of-xss-4af73a5db81f2023-01-02monthly1.0 https://thexssrat.medium.com/why-you-should-start-caring-about-cybersecurity-and-how-pen-testing-can-help-b16712732cc72023-01-01monthly0.7 https://thexssrat.medium.com/iso-27001-continues-improvement-in-information-security-43b873ff95c52023-02-13monthly0.7 https://thexssrat.medium.com/using-sqlmap-authenticated-41a28b8f7d5e2023-02-13monthly1.0 https://thexssrat.medium.com/finding-your-first-bug-bounty-booty-2c165781f04f2023-02-11monthly1.0 https://thexssrat.medium.com/csrf-a-historical-dinosaur-but-oh-so-relevant-7dfd244ddc9f2023-02-10monthly0.7 https://thexssrat.medium.com/broken-access-control-understanding-and-finding-issues-e9d61972d7f2023-02-09monthly0.7 https://thexssrat.medium.com/8-top-tips-to-help-you-find-sqli-f3e93f671bb02023-02-09monthly1.0 https://thexssrat.medium.com/the-popping-history-of-xss-4122e34ac5862023-02-09monthly0.7 https://thexssrat.medium.com/10-essential-tips-for-bug-bounty-hunters-eb9b88aa5bfa2023-02-07monthly1.0 https://thexssrat.medium.com/even-more-resources-to-make-you-a-better-hacker-fbd997c33acd2023-02-07monthly0.7 https://thexssrat.medium.com/a-love-letter-to-ethical-hacking-446d080c17272023-02-07monthly0.7 https://thexssrat.medium.com/the-road-to-oscp-in-2023-ed88f695f3492023-03-26monthly1.0 https://thexssrat.medium.com/the-new-owasp-api-top-10-rc-2023-9293fe8d9d562023-03-25monthly0.7 https://thexssrat.medium.com/unveiling-the-owasp-top-10-of-2021-a-comprehensive-guide-to-web-application-security-32d0a409621f2023-03-23monthly0.7 https://thexssrat.medium.com/the-xss-revolution-a-game-changer-in-the-cybersecurity-landscape-2ccf4e7840452023-05-27monthly1.0 https://thexssrat.medium.com/here-is-why-you-are-doing-automation-wrong-in-ethical-hacking-3688df99ecf32023-07-04monthly1.0 https://thexssrat.medium.com/bug-bounty-web-application-security-hunting-checklist-2026-xss-rat-version-1886138a82002026-04-06daily0.7 https://thexssrat.medium.com/a-list-of-50-tools-every-hacker-should-know-df8d87cf4b582023-12-21monthly1.0 https://thexssrat.medium.com/a-very-basic-beginner-bug-bounty-methodology-15eca16ca7872023-12-21monthly1.0 https://thexssrat.medium.com/how-to-look-for-sqli-with-a-practical-sqlmap-guide-c09e290a04fc2023-12-20monthly1.0 https://thexssrat.medium.com/defend-your-network-join-the-cyber-crusade-webinar-on-dos-and-ddos-attacks-557a35bc4b9e2024-10-05monthly0.7 https://thexssrat.medium.com/understanding-broken-access-control-bac-a-comprehensive-guide-c0e325c43b042024-11-09monthly1.0 https://thexssrat.medium.com/how-to-automate-your-broad-scope-recon-a4ff998dea0e2024-11-09monthly1.0 https://thexssrat.medium.com/hunting-for-idor-and-bac-vulnerabilities-in-b2b-applications-with-burp-suites-authorize-extension-597877b53d942024-10-31monthly1.0 https://thexssrat.medium.com/advanced-techniques-for-bypassing-web-filters-a-practical-guide-to-identifying-and-exploiting-xss-f6cadeedf9ca2024-11-12monthly1.0 https://thexssrat.medium.com/understanding-and-testing-for-api3-2023-broken-object-property-level-authorization-c04fc4a7dfd12024-12-07monthly0.7 https://thexssrat.medium.com/understanding-and-testing-for-api2-2023-broken-authentication-d27e5524a6822024-12-06monthly0.7 https://thexssrat.medium.com/understanding-and-testing-for-api1-2023-broken-object-level-authorization-d46a533bab932024-12-05monthly0.7 https://thexssrat.medium.com/bug-bounty-methodology-checklist-for-web-applications-b2b-apps-b876a20236d02024-12-04monthly1.0 https://thexssrat.medium.com/become-a-hacker-101-a-list-of-resources-2e4c3f9b3d592025-08-08monthly0.7 https://thexssrat.medium.com/that-time-an-agentic-ai-pentester-beat-me-in-capie-9ef6097c3c332025-10-01monthly0.7