Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

List of XSS Vectors/Payloads

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Repository for hosting my research papers

Awesome XSS stuff

A book series on JavaScript. @YDKJS on twitter.

📜 33 JavaScript concepts every developer should know.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Source code for Hacker101.com - a free online web and mobile security class.