Skip to content
Anas Magane
Search
⌘K
About
Notes
Projects
Content
Certs
Certifications
Notes
A personal knowledge base, organized by area.
Search notes
⌘K
Browse
Web
24
APIs
11
Active Directory
4
Cloud
1
Linux
1
Networking
5
DFIR
17
Cryptography
2
Reconnaissance
6
Tools
6
Bug Bounty
4
Research
21
Pinned
Web Application Basics
Web / Methodology
JWT attack
Web / Authentication
SQL Injection (SQLi) – Pentest Cheatsheet
Web / Injection
GraphQL Penetration Testing - Complete Guide
APIs / GraphQL
Recently updated
Writeup Libraries & Archives
Bug Bounty
September 22, 2026
Publications & Feeds
Bug Bounty
September 22, 2026
Individual Hunters
Bug Bounty
September 22, 2026
Telegram Channels
Bug Bounty
September 22, 2026
Getting Started with OSINT
Reconnaissance
September 8, 2026
Legal & Ethical Use
Reconnaissance
September 8, 2026
Browse
Web
Methodology
Web Application Basics
Web Security Testing Checklist
Authentication
Authentication Vulnerabilities
JWT attack
Injection
Introduction to SQLMap
OS Command Injection - Anas Education
Server-Side Template Injection (SSTI)
SQL Injection (SQLi) – Pentest Cheatsheet
XXE attack
Client-Side
Clickjacking (UI Redressing)
Cross-Origin Resource Sharing (CORS) – Detailed Cheat
CSRF Vulnerability Explained
XSS Cookie Exfiltration Guide
اختبار أمان WebSockets من الصفر
Server-Side
HTTP Host Header Injection
HTTP Parameter Pollution (HPP & SSPP)
HTTP Request Smuggling
Open Redirect – Practical Guide
File Handling
File Upload
Path Traversal
Business Logic
Information Disclosure Vulnerabilities
Rate limit vulnerabilities
CMS
Drupal
WordPress
APIs
API 02: Exploitation - JWT Vulnerability
API 03: JWT Cracking - Weak Secret Key
API 04: HTTP Verb Tampering
API 05: Minified JavaScript Analysis
API 06 – CSRF Bypass Write-up
API Penetration Test Notes: IDOR Discovery
GraphQL
Bypassing GraphQL Introspection Defenses
GraphQL Lab - Bypassing Rate Limiting with Aliases
GraphQL Lab - Finding Hidden Endpoint with Defense Bypass
GraphQL Lab 2 - Finding Admin Password
GraphQL Penetration Testing - Complete Guide
Active Directory
Active Directory - Common Open Ports
Active Directory - Enumeration Cheat Sheet
Active Directory Enumeration: enum4linux, Kerberos, SMB
Windows Password Storage Locations
Cloud
AWS pentest
Linux
Kali Linux Cheat Sheet
Networking
Network Basics
Networking Essentials
Top 100 Protocoles Réseau
Wireless
WiFi Pentesting
WiFi Pentesting Tools
DFIR
Forensics
Autopsy
DFIR & Steganography Cheat-Sheet · Anas Education
Disk/Image Analysis
File Signatures for Steganography
Forensics Fundamentals
Linux Forensics: Top 20 Locations to Find the Flag
Memory Forensics with Volatility 3
Windows Forensics: Top 20 Locations to check in the disk file for windows
Blue Team
CAPA - Tool Overview & Usage Guide
FlareVM - ترسانة أدوات التحليل والهندسة العكسية
IDS Fundamentals
Incident Response Fundamentals
Logs Fundamentals (Simple English)
Security Information and Event Management (SIEM)
SOC Fundamentals
Vulnerabilities Scanning
What Is the Purpose of a Firewall
Cryptography
Cryptography Basics
Hashing Basics
Reconnaissance
Getting Started with OSINT
Google Dorks Cheat Sheet
Legal & Ethical Use
OPSEC for OSINT Research
OSINT Methodology
Specialized Search Engines
Tools
Armitage: Setup & Troubleshooting
Free OAST and webhooks tools
Gobuster Guide
Metasploit Windows Hacking Lab - Educational Guide
Nuclei – Practical Guide for Beginners
Post exploitation
Bug Bounty
Writeup Libraries & Archives
Publications & Feeds
Individual Hunters
Telegram Channels
Research
Cybersecurity Interview Preparation (FR)
How to Write a Professional Pentest Report
Malware Analysis: Code Walkthrough
Penetration Testing Report
PyJail Bypass · Simple Guide
Top 30 Cybersecurity Certifications (From Cheapest to Most Expensive)
CTF
Cryptography: CTF Tools
CTF Practice Sites
CTF Write-up: BitLocker
CTF Write-up: CNSS-DZ Challenge
CTF Write-up: Elif Store
CTF Write-up: Endianness
CTF Write-up: ETEIP v2
CTF Write-up: Event Logs
CTF Write-up: Hacked Disk
CTF Write-up: Quiz4Education
Reverse Engineering: CTF Tools
Web CTF: Challenge Notes
Secure Coding
Dev With Next
Formulaire de Contact Sécurisé
Tailwind CSS Cheat Sheet (Table Format)
