📂 PENETRATION TESTING ┃ ┣ 📂 Information Disclosure ┃ ┣ 📂 Sensitive Data Exposure ┃ ┣ 📂 Debug Information ┃ ┣ 📂 Backup Files ┃ ┗ 📂 Configuration Exposure ┃ ┣ 📂 File Upload ┃ ┣ 📂 Extension Bypass ┃ ┣ 📂 MIME Validation ┃ ┣ 📂 Content-Type Manipulation ┃ ┣ 📂 File Processing ┃ ┗ 📂 Upload → RCE ┃ ┣ 📂 Open Redirect ┃ ┣ 📂 URL Parameters ┃ ┣ 📂 Redirect Validation ┃ ┣ 📂 Allowlist Bypass ┃ ┗ 📂 Redirect Chains ┃ ┣ 📂 File Inclusion ┃ ┣ 📂 LFI ┃ ┣ 📂 RFI ┃ ┣ 📂 Path Traversal ┃ ┣ 📂 Filter Bypass ┃ ┗ 📂 Inclusion Chains ┃ ┣ 📂 XSS ┃ ┣ 📂 Reflected XSS ┃ ┣ 📂 Stored XSS ┃ ┣ 📂 DOM XSS ┃ ┣ 📂 Context Analysis ┃ ┗ 📂 Filter Bypass ┃ ┣ 📂 SQL Injection ┃ ┣ 📂 Error-Based ┃ ┣ 📂 Boolean-Based ┃ ┣ 📂 Time-Based ┃ ┣ 📂 Union-Based ┃ ┗ 📂 Blind SQLi ┃ ┣ 📂 Command Injection ┃ ┣ 📂 OS Command Injection ┃ ┣ 📂 Blind Command Injection ┃ ┣ 📂 Argument Injection ┃ ┗ 📂 Filter Bypass ┃ ┣ 📂 CSRF ┃ ┣ 📂 Token Validation ┃ ┣ 📂 SameSite Cookies ┃ ┣ 📂 Origin Validation ┃ ┗ 📂 CSRF Chains ┃ ┣ 📂 SSRF ┃ ┣ 📂 Basic SSRF ┃ ┣ 📂 Blind SSRF ┃ ┣ 📂 SSRF Bypass ┃ ┣ 📂 Redirect Chains ┃ ┗ 📂 SSRF Chains ┃ ┣ 📂 CORS ┃ ┣ 📂 Origin Validation ┃ ┣ 📂 Credentials ┃ ┣ 📂 Wildcard Origins ┃ ┗ 📂 Misconfigurations ┃ ┣ 📂 API Security ┃ ┣ 📂 Authentication ┃ ┣ 📂 Authorization ┃ ┣ 📂 BOLA / IDOR ┃ ┣ 📂 Mass Assignment ┃ ┗ 📂 Rate Limiting ┃ ┣ 📂 GraphQL ┃ ┣ 📂 Introspection ┃ ┣ 📂 Authorization ┃ ┣ 📂 Query Complexity ┃ ┗ 📂 Information Disclosure ┃ ┣ 📂 Web Cache ┃ ┣ 📂 Cache Poisoning ┃ ┣ 📂 Cache Deception ┃ ┣ 📂 Cache Key Analysis ┃ ┗ 📂 Cache Bypass ┃ ┣ 📂 CVE Research ┃ ┣ 📂 Log4Shell ┃ ┣ 📂 Version Detection ┃ ┣ 📂 Vulnerability Research ┃ ┗ 📂 Patch Validation ┃ ┣ 📂 Study Resources ┃ ┣ 📂 Cheat Sheets ┃ ┣ 📂 Payload References ┃ ┣ 📂 Writeups ┃ ┗ 📂 Research Notes ┃ ┗ 📂 Scripts ┣ 📂 Recon ┣ 📂 Enumeration ┣ 📂 Fuzzing ┣ 📂 Automation ┗ 📂 Custom PoCs GitHub: github.com/AlbusSec/Penetrat… RECON → DISCOVER → TEST → BYPASS → VALIDATE → CHAIN → REPORT A useful collection for learning web security, penetration testing, and bug bounty methodology. #CyberSecurity #BugBounty #Pentesting #WebSecurity #InfoSec