This year (2022), I have worked on creating educational resources in various forms, such as blogs, Twitter series, mindmaps and others. In case you missed them, here are all of them:
# SecurityExplained Twitter Series:
- github.com/harsh-bothra/SecurityExplained
🧵 - 1/5
2/5
# MindMaps
1. Forget Password Vulns: xmind.net/m/nZwbdk/
2. XML Attacks: xmind.net/m/xNEY9b/
3. 2FA Bypass Techniques: xmind.net/m/8Hkymg/
4. Android PT Checklist: xmind.net/m/GkgaYH/
5. Cookie Based Auth Vulnerabilities: xmind.net/m/2FwJ7D/
3/5
6. Scope Based Recon: xmind.net/m/hKKexj/
7. Unauthenticated JIRA CVEs: xmind.net/m/Jrn7f8/
# Blogs
1. cobalt.io/blog/graph-query-language-explained
2. cobalt.io/blog/protect-against-server-side-request-forgery
3. cobalt.io/blog/web-socket-vulnerabilites
4. cobalt.io/blog/introduction-to-serverless-vulnerabilities
5. cobalt.io/blog/hunting-for-broken-link-hijacking-blh
4/5
6. cobalt.io/blog/introduction-to-command-injection-vulnerability
7. developer.cobalt.io/bestpractices/protect-against-xxe
8. developer.cobalt.io/bestpractices/protect-against-ssrf
9. blog.yeswehack.com/yeswerhackers/getting-started-ios-penetration-testing-part-1/
10. blog.yeswehack.com/yeswerhackers/getting-started-ios-penetration-testing-part-2/
11. blog.yeswehack.com/yeswerhackers/parameter-discovery-quick-guide-to-start/
12. blog.yeswehack.com/yeswerhackers/abusing-s3-bucket-permissions/
5/5
Apart from these, I have shared many threads on my Twitter account: twitter.com/harshbothra_!
While this year was incredible, next year will be thrilling as I will develop some new content, and some new series. So feel free to drop what you want to see next in the comments.