murrtada

Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain…

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.

Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next.

Hunting skill for ssrf vulnerabilities. Built from 15 public bug bounty reports including AWS metadata SSRF (HackerOne $25k Analytics PDF…

Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains.

Hunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Office-doc (PPTX/DOCX) XXE, SOAP…

Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments.

Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management) — enumerate the full API version history…

Client-facing red-team deliverable format — codifies the Subject / Observations / Description / Impact / Recommendation / PoC structure…

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing…

Red-team operator discipline — the mindset corrections that separate offensive testing from defensive WAPT.

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1…