# Web Hacking Tips

## Web Hacking Tips

- [Web App Hacking Tips & Tricks](https://www.webhackingtips.com/web-app-hacking-tips-and-tricks.md): https://www.linkedin.com/in/jakedmurphy1/
- [Week 1 - XSS Filter Evasion](https://www.webhackingtips.com/weekly-tips/week-1-xss-filter-evasion.md)
- [Week 2 - CSRF Token Bypass](https://www.webhackingtips.com/weekly-tips/week-2-csrf-token-bypass.md)
- [Week 3 - CORS Exploitation](https://www.webhackingtips.com/weekly-tips/week-3-cors-exploitation.md)
- [Week 4 - Finding XSS](https://www.webhackingtips.com/weekly-tips/week-4-finding-xss.md)
- [Week 5 - CSRF Explanation](https://www.webhackingtips.com/weekly-tips/week-5-csrf-explanation.md)
- [Week 6 - XSS Types](https://www.webhackingtips.com/weekly-tips/week-6-xss-types.md)
- [Week 7 - Advanced SQLMap](https://www.webhackingtips.com/weekly-tips/week-7-advanced-sqlmap.md)
- [Week 8 - Stealing HttpOnly Cookies from PHPINFO](https://www.webhackingtips.com/weekly-tips/week-8-stealing-httponly-cookies-from-phpinfo.md)
- [Week 9 - SQLMap Tamper Scripts](https://www.webhackingtips.com/weekly-tips/week-9-sqlmap-tamper-scripts.md)
- [Week 10 - XSS Obfuscated Payloads](https://www.webhackingtips.com/weekly-tips/week-10-xss-obfuscated-payloads.md)
- [Week 11 - XS-Search: Cross-Origin Enumeration](https://www.webhackingtips.com/weekly-tips/week-11-xs-search-cross-origin-enumeration.md)
- [Week 12 - Subdomain Takeovers](https://www.webhackingtips.com/weekly-tips/week-12-subdomain-takeovers.md)
- [Week 13 - XSS Keylogger](https://www.webhackingtips.com/weekly-tips/week-13-xss-keylogger.md)
- [Week 14 - Algolia API Keys](https://www.webhackingtips.com/weekly-tips/week-14-algolia-api-keys.md)
- [Week 15 - GraphQL Introspection](https://www.webhackingtips.com/weekly-tips/week-15-graphql-introspection.md)
- [Week 16 - Naming BurpSuite Repeater Tabs](https://www.webhackingtips.com/weekly-tips/week-16-naming-burpsuite-repeater-tabs.md)
- [Week 17 - GoBuster Tips](https://www.webhackingtips.com/weekly-tips/week-17-gobuster-tips.md)
- [Week 18 - Burp Request to Python Script](https://www.webhackingtips.com/weekly-tips/week-18-burp-request-to-python-script.md)
- [Week 19 - Customizing Nikto Scans](https://www.webhackingtips.com/weekly-tips/week-19-customizing-nikto-scans.md)
- [Week 20 - Google Phishing Page](https://www.webhackingtips.com/weekly-tips/week-20-google-phishing-page.md)
- [Week 21 - Google BITB](https://www.webhackingtips.com/weekly-tips/week-21-google-bitb.md)
- [Week 22 - XSS Through SVG File](https://www.webhackingtips.com/weekly-tips/week-22-xss-through-svg-file.md)
- [Week 23 - FoxyProxy Extension](https://www.webhackingtips.com/weekly-tips/week-23-foxyproxy-extension.md)
- [Week 24 - CSP Bypasses](https://www.webhackingtips.com/weekly-tips/week-24-csp-bypasses.md)
- [Week 25 - Pilfering LocalStorage with XSS](https://www.webhackingtips.com/weekly-tips/week-25-pilfering-localstorage-with-xss.md)
- [Week 26 - Cloud SSRF](https://www.webhackingtips.com/weekly-tips/week-26-cloud-ssrf.md)
- [Week 27 - Blind XSS](https://www.webhackingtips.com/weekly-tips/week-27-blind-xss.md)
- [Week 28 - Firebase  Misconfigurations](https://www.webhackingtips.com/weekly-tips/week-28-firebase-misconfigurations.md)
- [Week 29 - XSS to CSRF](https://www.webhackingtips.com/weekly-tips/week-29-xss-to-csrf.md)
- [Week 30 - SQLMap Debugging](https://www.webhackingtips.com/week-30-sqlmap-debugging.md)
- [Week 31 - WayBack Machine](https://www.webhackingtips.com/week-31-wayback-machine.md)
- [Week 32 - O365 BITB](https://www.webhackingtips.com/week-32-o365-bitb.md)
- [Week 33 - Burp Intruder Attacks](https://www.webhackingtips.com/week-33-burp-intruder-attacks.md)
- [Week 34 - GraphQL Bruteforcing](https://www.webhackingtips.com/week-34-graphql-bruteforcing.md)
- [Week 35 - User Accounts](https://www.webhackingtips.com/week-35-user-accounts.md)
- [Week 36 - CVE Submission](https://www.webhackingtips.com/week-36-cve-submission.md)
- [Week 37 - Second Order SQLi](https://www.webhackingtips.com/week-37-second-order-sqli.md)
- [Week 38 - Out of Band SQLi](https://www.webhackingtips.com/week-38-out-of-band-sqli.md)
- [Week 39 - Broken Link Hijacking](https://www.webhackingtips.com/week-39-broken-link-hijacking.md)
- [Week 40 - JWT Testing](https://www.webhackingtips.com/week-40-jwt-testing.md)
- [Week 41 - BURP ATOR](https://www.webhackingtips.com/week-41-burp-ator.md)
- [Week 42 - ProxyChains](https://www.webhackingtips.com/week-42-proxychains.md)
- [Week 43 - CSS Keylogging](https://www.webhackingtips.com/week-43-css-keylogging.md)
- [Week 44 - SVG SSRF](https://www.webhackingtips.com/week-44-svg-ssrf.md)
- [Week 45 - Request Smuggling](https://www.webhackingtips.com/week-45-request-smuggling.md)
- [Week 46 - XSS Payloads](https://www.webhackingtips.com/week-46-xss-payloads.md)
- [Week 47 - DNS Re-binding](https://www.webhackingtips.com/week-47-dns-re-binding.md)
- [Week 48 - SSRF Bypass](https://www.webhackingtips.com/week-48-ssrf-bypass.md)
- [Week 49 - File Upload Bypass](https://www.webhackingtips.com/week-49-file-upload-bypass.md)
- [Week 50 - CRLF Injection](https://www.webhackingtips.com/week-50-crlf-injection.md)
- [Week 51 - HTML to PDF](https://www.webhackingtips.com/week-51-html-to-pdf.md)
- [Week 52 - Parameter Pollution](https://www.webhackingtips.com/week-52-parameter-pollution.md)
- [Week 53 - Pre-Account Takeover](https://www.webhackingtips.com/week-53-pre-account-takeover.md)
- [Week 54 - Race Conditions](https://www.webhackingtips.com/week-54-race-conditions.md)
- [Week 55 - SQLi to RCE](https://www.webhackingtips.com/week-55-sqli-to-rce.md)
- [Week 56 - Cloud SSRF PrivEsc](https://www.webhackingtips.com/week-56-cloud-ssrf-privesc.md)
- [Week 57 - Response Queue Poisoning](https://www.webhackingtips.com/week-57-response-queue-poisoning.md)
- [Week 58 - Directory Traversal](https://www.webhackingtips.com/week-58-directory-traversal.md)
- [Week 59 - File Upload -> CSRF](https://www.webhackingtips.com/week-59-file-upload-greater-than-csrf.md)
- [Week 60 - Modern CSRF Attacks](https://www.webhackingtips.com/week-60-modern-csrf-attacks.md)