Posts

Pentesting tools

Important links virustotal  : to get sub domains

Template for reporting vulnerability

Title -- Eg "Reflected Cross-Site Scripting in profiles" Severity --  informational, low, medium, high, Critical Description -- Brief description of what the vulnerability is Reproduction Steps -- Brief description of how to reproduce the bug; preferably with a small proof of concept Impact -- What can be done with the vulnerability ? Mitigation -- How is it fixed ? Affected asset -- Generally a list of affected URL