pentesterflow

GraphQL pentest playbook — find the endpoint, dump the schema (introspection or field-suggestion fallback), then test for authoriz...

External recon playbook for a web target — subdomain enumeration, live-host probing, tech fingerprinting, and a first pass at cont...

Web vulnerability hunting playbook. Use after recon, when you have specific hosts/endpoints to test for IDOR/BAC, injection, auth ...