← all publishers

yafet-dev

@yafet-dev source repo

Report this profile Claim this profile

• 29 skills
• 0 followers
• 8 hours ago last updated

1. ▌
   Dos · yafet-dev bundle

   Advanced denial-of-service testing methodology for bug bounty and application security work. Use when testing or reviewing application DoS, web cache poisoning DoS, algorithmic complexity, expensive GraphQL/API queries, large uploads, infinite loops, XMLRPC or brute-force amplification, account lockout abuse, resource exhaustion, cache-key poisoning, decompression or parser bombs, and workflows where small requests can create disproportionate CPU, memory, storage, cache, quota, or availability impact.
   0 installs
2. ▌
   Rce · yafet-dev bundle

   Advanced remote code execution testing methodology for bug bounty and application security work. Use when testing or reviewing command execution, server-side code execution, upload-to-RCE, parser or renderer RCE, dependency confusion, package-install hooks, Git flag injection, VPN/appliance pre-auth RCE, desktop app RCE, admin-to-RCE, template or deserialization execution, CI/build worker execution, and workflows where attacker-controlled input reaches code, commands, interpreters, plugins, or privileged jobs.
   0 installs
3. ▌
   Xss · yafet-dev bundle

   Advanced cross-site scripting testing methodology for bug bounty and application security work. Use when testing or reviewing reflected XSS, hidden-parameter and encoding-filtered XSS, stored XSS, DOM XSS, cache-poisoned XSS, OAuth/login-flow XSS, admin-context XSS, markdown/CMS/wiki XSS, chat/client XSS, SVG/file upload XSS, postMessage XSS, CSP bypass, mobile/WebView XSS, and workflows where attacker-controlled input executes JavaScript in another user's browser or a privileged admin context.
   0 installs
4. ▌
   Xxe · yafet-dev bundle

   Advanced XML External Entity (XXE) testing methodology for bug bounty and application security work. Use when testing or reviewing XML parsers, SOAP/SAML/SXMP processors, Office/PDF/image metadata parsers, XMP metadata in JPEGs, SVG/XML uploads, IVR or phone-to-XML workflows, document import/export, blind XXE, out-of-band XXE, local file disclosure, SSRF through XML entities, parser configuration mistakes, and workflows where attacker-controlled XML or metadata can resolve external entities.
   0 installs
5. ▌
   Csrf · yafet-dev bundle

   Advanced CSRF testing methodology for bug bounty and application security work. Use when testing or reviewing cross-site request forgery, missing or weak CSRF tokens, SameSite cookie gaps, JSON CSRF, OAuth or linked-account CSRF, deeplink CSRF, state-changing API endpoints, payment provider linking, account settings changes, admin console actions, and any workflow where a browser can be tricked into sending authenticated state-changing requests.
   0 installs
6. ▌
   Idor · yafet-dev bundle

   Advanced IDOR/BOLA testing methodology for bug bounty and application security work. Use when testing or reviewing insecure direct object references, broken object-level authorization, cross-tenant access, account/member takeover through object IDs, payment/order/billing data exposure, destructive object mutations, GraphQL object authorization flaws, private file or export access, support/ticket/message/event authorization issues, or HTTP/API traffic with object identifiers in URL paths, query strings, JSON/form/multipart bodies, GraphQL variables, headers, cookies, mobile APIs, internal APIs, hidden features, and second-order workflows.
   0 installs
7. ▌
   Sqli · yafet-dev bundle

   Advanced SQL injection testing methodology for bug bounty and application security work. Use when testing or reviewing SQLi, blind SQLi, time-based SQLi, error-based SQLi, second-order SQLi, GraphQL or API filter SQLi, search/report/admin SQLi, JSON or array parameter SQLi, header-based SQLi, SQLi-to-file-read, SQLi-to-RCE, and workflows where user-controlled input reaches database queries or query builders unsafely.
   0 installs
8. ▌
   Ssrf · yafet-dev bundle

   Advanced SSRF testing methodology for bug bounty and application security work. Use when testing or reviewing server-side request forgery, URL preview APIs, import/export APIs, webhooks, callbacks, file converters, image fetchers, analytics reports, OAuth controllers, cloud metadata access, internal service reachability, DNS rebinding assumptions, redirect bypasses, blind SSRF, SSRF-to-file-read, and SSRF chains to credentials, internal APIs, or RCE.
   0 installs
9. ▌
   Ssti · yafet-dev bundle

   Advanced server-side template injection testing methodology for bug bounty and application security work. Use when testing or reviewing template rendering, email templates, CMS templates, preview/render APIs, Smarty/Jinja/Twig/ERB/Ruby/Python template engines, path traversal plus SSTI, SSTI-to-RCE, reflected or stored template execution, user-controlled template variables, and workflows where attacker input is evaluated by a server-side template engine.
   0 installs
10. ▌
    OAUTH · yafet-dev bundle

    Advanced OAuth security testing methodology for bug bounty and application security work. Use when testing or reviewing OAuth 2.0 authorization flows, redirect_uri validation, state or nonce binding, authorization code leakage, token leakage, account linking, OAuth CSRF, provider callback handling, mobile OAuth handoff, IDP/RP trust, email verification claims, token scope mismatch, OAuth SSRF, and open redirect chains leading to account takeover or data access.
    0 installs
11. ▌
    GRAPHQL · yafet-dev bundle

    Advanced GraphQL security testing methodology for bug bounty and application security work. Use when testing or reviewing GraphQL queries, mutations, subscriptions, schema exposure, resolver authorization, nested data leaks, IDOR/BOLA in variables, mutation aliasing DoS, batched operations, global node IDs, token scope mismatch, hidden admin operations, SSRF through GraphQL fields, and REST/GraphQL permission drift.
    0 installs
12. ▌
    Web Cache · yafet-dev bundle

    Advanced web cache poisoning and cache deception testing methodology for bug bounty and application security work. Use when testing or reviewing cache key confusion, Host header poisoning, CORS header poisoning, CDN cache poisoning, web cache deception, stored XSS through cache, DoS through cache, private data cached publicly, missing Vary headers, path normalization mismatch, origin/CDN disagreement, and workflows where shared caches serve attacker-controlled or private responses to other users.
    0 installs
13. ▌
    Mfa Bypass · yafet-dev bundle

    Advanced MFA and 2FA bypass testing methodology for bug bounty and application security work. Use when testing or reviewing two-factor authentication, MFA enrollment, MFA disable flows, backup codes, recovery codes, remembered devices, enforcement policies, race conditions, blank or reused codes, session persistence after MFA changes, mobile/web MFA parity, embedded forms, and workflows where a user can bypass, weaken, remove, or satisfy MFA incorrectly.
    0 installs
14. ▌
    Openid Sso · yafet-dev bundle

    Advanced OpenID, OIDC, SAML, and SSO security testing methodology for bug bounty and application security work. Use when testing or reviewing SSO login, SAML assertions, OpenID Connect ID tokens, SSO domain enforcement, JIT/SCIM provisioning, RelayState, signed assertions, JWT client-side generation, organization joins, enterprise identity matching, SSO token theft, SSO DoS, and workflows where federated identity grants account, tenant, or internal-service access.
    0 installs
15. ▌
    API Hacking · yafet-dev bundle

    Advanced API security testing methodology for bug bounty and application security work. Use when testing or reviewing REST APIs, GraphQL APIs, mobile APIs, internal or undocumented APIs, exposed infrastructure APIs, API key or token leaks, broken API authentication or authorization, BOLA/IDOR, sensitive response data, CORS/cache/CSRF flaws, SSRF through preview/export APIs, injection through API parameters, cloud or Kubernetes/Docker/control-plane APIs, webhook/callback APIs, and API-driven account, tenant, admin, file, billing, or operational workflows.
    0 installs
16. ▌
    File Upload · yafet-dev bundle

    Advanced file upload vulnerability testing methodology for bug bounty and application security work. Use when testing or reviewing unrestricted uploads, webshell upload, upload-to-RCE, stored XSS through files, SVG/image/PDF upload abuse, MIME/type validation bypass, extension bypass, archive extraction, upload SSRF, metadata abuse, path traversal in filenames, file overwrite, public storage exposure, and workflows where uploaded content is stored, processed, rendered, converted, or executed.
    0 installs
17. ▌
    Auth Hacking · yafet-dev bundle

    Advanced authentication security testing methodology for bug bounty and application security work. Use when testing or reviewing login, logout, registration, OTP/SMS, password reauthentication, password reset, session cookies, auth tokens, 2FA/MFA, SSO/SAML/OAuth/OIDC, subdomain-to-auth chains, redirect-based auth gates, middleware auth, response-manipulation auth bypass, brute-force throttling, exposed unauthenticated admin or infrastructure panels, pre-auth appliance flaws, client authentication, bot authentication, and any workflow where authentication can be bypassed, weakened, replayed, stolen, or desynchronized.
    0 installs
18. ▌
    Clickjacking · yafet-dev bundle

    Advanced clickjacking and UI redress testing methodology for bug bounty and application security work. Use when testing or reviewing frame embedding, OAuth authorization clicks, donation/payment flows, admin actions, browser permission prompts, double-clickjacking, drag-and-drop abuse, UI overlay attacks, mobile WebViews, postMessage UI flows, and any sensitive action that can be triggered by deceiving a user's clicks.
    0 installs
19. ▌
    File Reading · yafet-dev bundle

    Advanced file read and path traversal testing methodology for bug bounty and application security work. Use when testing or reviewing local file inclusion, arbitrary file read, path traversal, SSRF-to-file-read, PDF/HTML export file inclusion, archive extraction traversal, client download path traversal, container or host file disclosure, metadata file access, and workflows where user-controlled paths, URLs, filenames, or rendering content can expose restricted files.
    0 installs
20. ▌
    Open Redirect · yafet-dev bundle

    Advanced open redirect testing methodology for bug bounty and application security work. Use when testing or reviewing redirect URL parameters, login/logout redirects, OAuth redirect chains, SSO callbacks, payment or QR-code redirects, mobile deeplinks, URL parser mismatches, double encoding, host allowlist bypasses, and chains where redirection leads to token theft, account takeover, phishing, SSRF, XSS, or trusted-domain abuse.
    0 installs
21. ▌
    Business Logic · yafet-dev bundle

    Advanced business logic vulnerability testing methodology for bug bounty and application security work. Use when testing or reviewing workflow abuse, price or balance manipulation, approval bypass, abuse-report misuse, account recovery logic, invite or onboarding logic, state machine flaws, negative quantities, duplicate redemption, free purchases, moderation bypass, trust assumptions, and multi-step product flows where valid-looking actions can produce unauthorized business outcomes.
    0 installs
22. ▌
    Race Condition · yafet-dev bundle

    Advanced race condition testing methodology for bug bounty and application security work. Use when testing or reviewing concurrent requests, double spending, duplicate redemption, multiple payout, email activation races, 2FA races, undeletable membership, follow/like counters, gift cards, coupons, balance changes, inventory, account state transitions, and workflows where simultaneous or reordered actions break locking, idempotency, or state consistency.
    0 installs
23. ▌
    Mobile Security · yafet-dev bundle

    Advanced mobile application security testing methodology for bug bounty and application security work. Use when testing or reviewing Android or iOS apps, deeplinks, intents, universal links, WebViews, local storage, hardcoded secrets, mobile API authorization, certificate pinning, host validation, exported components, notification leaks, app-to-app auth handoff, file/path traversal, mobile RCE chains, and mobile-only account takeover or data exposure paths.
    0 installs
24. ▌
    Account Takeover · yafet-dev bundle

    Advanced account takeover (ATO) testing methodology for bug bounty and application security work. Use when testing or reviewing login, password reset, email or phone change, OAuth/OIDC/SAML/social login, magic links, session cookies, JWTs, remember-me tokens, CSRF on identity-changing actions, linked accounts, SSO/SCIM provisioning, mobile deeplinks or intents, web cache issues, request smuggling chains, exposed admin/debug endpoints, and any workflow where a flaw may let one user obtain another user's session, reset credentials, bind an attacker-controlled identity, or assume account control.
    0 installs
25. ▌
    Request Smuggling · yafet-dev bundle

    Advanced HTTP request smuggling and desync testing methodology for bug bounty and application security work. Use when testing or reviewing front-end/back-end HTTP parser disagreement, CL.TE or TE.CL issues, HTTP/2 downgrading, proxy desync, cache poisoning through desync, credential or token theft, response queue poisoning, request tunneling, internal endpoint access, and chains where malformed HTTP framing crosses authentication, routing, or cache boundaries.
    0 installs
26. ▌
    Subdomain Takeover · yafet-dev bundle

    Advanced subdomain takeover testing methodology for bug bounty and application security work. Use when testing or reviewing dangling DNS records, unclaimed cloud/CDN/storage/app-service resources, CloudFront/Heroku/GitHub Pages/Azure/S3/Fastly-style takeovers, authentication bypass through trusted subdomains, cookie scope abuse, OAuth redirect allowlist abuse, staging subdomain takeover, and chains where a controlled subdomain can steal tokens, host trusted content, bypass auth, or affect users.
    0 installs
27. ▌
    Authorization Bypass · yafet-dev bundle

    Advanced authorization bypass and privilege escalation testing methodology for bug bounty and application security work. Use when testing or reviewing role escalation, admin escalation, tenant or organization boundary bypass, email verification bypass, invitation or SSO join flaws, OAuth/SAML authorization misuse, GraphQL or API authorization leaks, hidden admin accounts, approval workflow bypass, business-rule authorization gaps, unauthorized private data access, exposed admin panels, local-to-root or container privilege escalation, and workflows where a lower-privilege identity can read, act, approve, impersonate, or administer beyond its intended permissions.
    0 installs
28. ▌
    Information Disclosure · yafet-dev bundle

    Advanced information disclosure testing methodology for bug bounty and application security work. Use when testing or reviewing sensitive data leaks, private user data exposure, debug or Sentry leaks, directory listing, cache disclosure, deeplink data leakage, internal metadata, hidden IDs, stack traces, source maps, logs, backups, unauthenticated endpoints, and API, mobile, web, or infrastructure responses that reveal data beyond the intended audience.
    0 installs
29. ▌
    Waf Parser Differentials · yafet-dev bundle

    Test parser and normalization differentials between WAFs, proxies, servers, frameworks, and final sinks during authorized application security work. Use when equivalent requests are blocked or interpreted differently because of charset, URL/JSON/XML encoding, content type, parameter duplication, path normalization, application wrappers, or framework-specific parsing. Do not treat a WAF bypass alone as a vulnerability; require demonstrable backend security impact.
    0 installs