[HUNTING_KITS]
Per-bug-class reference sheets — parameters to test, payloads, and checklists. Each kit is the working companion to a data analysis: the analysis is the research, the kit is the tool.
IDOR16 min read
IDOR Hunting Kit
Every parameter name, probe sequence, bypass and escalation path for finding authorization bugs — distilled from 250 disclosed HackerOne reports into a sheet you keep open while testing.
IntermediateOPEN_KIT →
SSRF16 min read
SSRF Hunting Kit
Every parameter name, payload, filter bypass and escalation step for hunting Server-Side Request Forgery — extracted from 217 disclosed HackerOne reports and laid out to paste, not to read.
IntermediateOPEN_KIT →