> For the complete documentation index, see [llms.txt](https://www.webhackingtips.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.webhackingtips.com/weekly-tips.md).

# Weekly Tips

- [Week 1 - XSS Filter Evasion](https://www.webhackingtips.com/weekly-tips/week-1-xss-filter-evasion.md)
- [Week 2 - CSRF Token Bypass](https://www.webhackingtips.com/weekly-tips/week-2-csrf-token-bypass.md)
- [Week 3 - CORS Exploitation](https://www.webhackingtips.com/weekly-tips/week-3-cors-exploitation.md)
- [Week 4 - Finding XSS](https://www.webhackingtips.com/weekly-tips/week-4-finding-xss.md)
- [Week 5 - CSRF Explanation](https://www.webhackingtips.com/weekly-tips/week-5-csrf-explanation.md)
- [Week 6 - XSS Types](https://www.webhackingtips.com/weekly-tips/week-6-xss-types.md)
- [Week 7 - Advanced SQLMap](https://www.webhackingtips.com/weekly-tips/week-7-advanced-sqlmap.md)
- [Week 8 - Stealing HttpOnly Cookies from PHPINFO](https://www.webhackingtips.com/weekly-tips/week-8-stealing-httponly-cookies-from-phpinfo.md)
- [Week 9 - SQLMap Tamper Scripts](https://www.webhackingtips.com/weekly-tips/week-9-sqlmap-tamper-scripts.md)
- [Week 10 - XSS Obfuscated Payloads](https://www.webhackingtips.com/weekly-tips/week-10-xss-obfuscated-payloads.md)
- [Week 11 - XS-Search: Cross-Origin Enumeration](https://www.webhackingtips.com/weekly-tips/week-11-xs-search-cross-origin-enumeration.md)
- [Week 12 - Subdomain Takeovers](https://www.webhackingtips.com/weekly-tips/week-12-subdomain-takeovers.md)
- [Week 13 - XSS Keylogger](https://www.webhackingtips.com/weekly-tips/week-13-xss-keylogger.md)
- [Week 14 - Algolia API Keys](https://www.webhackingtips.com/weekly-tips/week-14-algolia-api-keys.md)
- [Week 15 - GraphQL Introspection](https://www.webhackingtips.com/weekly-tips/week-15-graphql-introspection.md)
- [Week 16 - Naming BurpSuite Repeater Tabs](https://www.webhackingtips.com/weekly-tips/week-16-naming-burpsuite-repeater-tabs.md)
- [Week 17 - GoBuster Tips](https://www.webhackingtips.com/weekly-tips/week-17-gobuster-tips.md)
- [Week 18 - Burp Request to Python Script](https://www.webhackingtips.com/weekly-tips/week-18-burp-request-to-python-script.md)
- [Week 19 - Customizing Nikto Scans](https://www.webhackingtips.com/weekly-tips/week-19-customizing-nikto-scans.md)
- [Week 20 - Google Phishing Page](https://www.webhackingtips.com/weekly-tips/week-20-google-phishing-page.md)
- [Week 21 - Google BITB](https://www.webhackingtips.com/weekly-tips/week-21-google-bitb.md)
- [Week 22 - XSS Through SVG File](https://www.webhackingtips.com/weekly-tips/week-22-xss-through-svg-file.md)
- [Week 23 - FoxyProxy Extension](https://www.webhackingtips.com/weekly-tips/week-23-foxyproxy-extension.md)
- [Week 24 - CSP Bypasses](https://www.webhackingtips.com/weekly-tips/week-24-csp-bypasses.md)
- [Week 25 - Pilfering LocalStorage with XSS](https://www.webhackingtips.com/weekly-tips/week-25-pilfering-localstorage-with-xss.md)
- [Week 26 - Cloud SSRF](https://www.webhackingtips.com/weekly-tips/week-26-cloud-ssrf.md)
- [Week 27 - Blind XSS](https://www.webhackingtips.com/weekly-tips/week-27-blind-xss.md)
- [Week 28 - Firebase  Misconfigurations](https://www.webhackingtips.com/weekly-tips/week-28-firebase-misconfigurations.md)
- [Week 29 - XSS to CSRF](https://www.webhackingtips.com/weekly-tips/week-29-xss-to-csrf.md)