DorkScan: Fast Google Dork Generation for Enhanced Bug Bounty ResearchDorkScan is an interactive web app that generates curated Google Dork queries for bug bounty hunters and students. Choose a role (Bug Bounty or Student), pick a dork category, add your target or search terms, and watch generated queries appear in a c...Oct 17, 2025 · 8 min readbalwantinfosec.hashnode.dev
Business Logic Flaws Explained: Key Testing Techniques and ApproachesWhat is a Business Logic Flaw? A Business Logic Flaw (BLF) happens when a web application allows a user to perform actions that break the intended business rules or workflow. Business logic vulnerabilities are as much an art as a science they require...Oct 16, 2025 · 13 min readbalwantinfosec.hashnode.dev
Testing JSON Web Tokens (JWTs) for Security Flaws: A Detailed Methodology for TestersIn this post you’ll find different methodologies and every important area to test for JWT vulnerabilities (header attacks, alg confusion, kid/jku/jwk injections, claim tampering, storage/transport issues, and more) so you can reproduce, document, and...Oct 9, 2025 · 13 min readbalwantinfosec.hashnode.dev