The XSS Rat - Proud XSS N00b :-)

I have built: - A security testing repo: github.com/The-XSS-Rat/Secur… - An API hacking tool: github.com/The-XSS-Rat/hackx… - A blog: blog.hackxpert.com/ (Yeah I know cert expired, will look into that today) - 150 exploits + 6 lifelike labs: labs.hackxpert.com/ - A student base of over 180 000 big: udemy.com/user/wesley-thijs/… - A wealth of courses: thexssrat.com/ - A youtube channel with over 1200 video's: youtube.com/c/thexssrat - A medium with over 7300 followers: thexssrat.medium.com/ - An incredible fanbase of over 50 000 rats on youtube + 150 000 here - A discord server with over 10 000 members + one for CAPIE + CNWPP + Hacker's toolkit - A list of 10 students i got to directly reporting bugs: thexssrat.podia.com/achievem… - A song: youtube.com/watch?v=S3bP3juJ… (No AI) - A family of my own - Reports on some of the giants of this earth - A pentesting company And still i get constantly attacked for not knowing anything - just copy pasting shit and not being good enough :-) hahaha you are so funny - THEN GO DO BETTER <3 Much love rat pack!! Thank you for the support!

I got hacked. I want to publicly thank my hackers. I’ve been humbled and really shown they’ve had the best intentions in mind for everyone while doing it. Especially for the ones in this world that can’t defend themselves. Dear rats… black hat doesn’t always mean negative intentions. A surgeon doesn’t cut in your body. Sometimes our egos get so big they give us pain… but worst of all they start to hurt others. Don’t let your ego get the best of yourself. I’m very sure these are some of the best hackers in the world. And they have no bad intentions. Damn dude, think about that for a moment. Even back when I got started my labs would get defaced often while much worse things could have been done to me. Now it’s the same thing. ❤️ I am soooo impressed by some of the things that happened, you have no idea how fucking cool it was and how much power some of these groups have. Respect 🫡

🐀 Most bundles come with a login, a welcome email and 47 things to open. Then you're on your own. That's the part I've changed on the 900 bundle. Every buyer now gets a 30-minute orientation call with me. You tell me your actual job, your hours and what you're after (a cert, a first role, bounties). You leave with a written plan built around that, not a generic roadmap. There's a real, anonymised example on the page. That call is why seats go out in small batches. 2 are open right now. When those two are in and I've met them, the next two open. Ariful and I take care of every rat who joins. What the seat holds: → Every course, current and retired, plus every future one, added automatically → 3 cert paths (CNWPP, CAPIE, CMWAP), exam vouchers included → Every live: CyberCrusades, the weekly Sunday session, private workshops → Lifetime RatCTF Premium + the 900 Discord: a few hundred rats worldwide, the mentors, my hunt group → Merch at cost €199 one time, or 3 × €71. No subscription. I can't promise you a bounty, a pass or a job. Anyone who does is lying. Authorised, in-scope targets only. If you'd rather start with a plan than a catalogue 👇 thexssrat.podia.com/full-hou… Much love <3 #bugbounty #infosec

Quick question: can you plan a pentest, stick to your scope, and explain your choices? 🐀 CMWAP (Certified Modern Web App Pentester) grades methodology and scope discipline over how many exploits you land. 90-min plan deadline, 24h window, 10-min debrief video, 3 months free RatCTF practice. Beginners can pass. thexssrat.podia.com/cert Full catalog and course bundles: thexssrat.podia.com/ #cybersecurity #pentesting

Your SIEM is only as good as the detections you write for it 🐀 Help Me, I Got Compromised: 5 connected hosts, 1 breach. Parse the logs, triage 15 SOC alerts, then write a Python script that auto-classifies the true positives. Finally, defend a host that's actively under attack 🔥 ratctf.com/purple-team P.S. Want the full course catalog? thexssrat.podia.com/ #purpleteam #infosec

A vulnerable lab built from a real finding: path traversal and account takeover challenges, open to anyone who wants to practise instead of only reading write-ups. Perfect if you're new to bug bounty and want a safe target to break :D

PHP2Shell demoed giving a shell on MediaWiki, Symfony, Laravel and phpBB on pre-patch PHP 8.2 to 8.5. If you run PHP anywhere and haven't updated yet, assume someone is already poking at it. Patch tonight, not next sprint.

A year of HTTP request smuggling research in one write-up: 4 mechanisms across 10 products, all coming down to reused connections with an unfinished previous request. If you hunt smuggling or desync bugs, read this before your next target. Great work :D

No bounty, but the team reproduced an integer-wrap bug across both backends and praised the rigour of the submission. A report that clean gets remembered. Hall of Fame plus that kind of reputation is worth more than one payout. Well done :D

5 accepted reports (1 low, 3 mediums, 1 high) two months into bug bounty as a side interest is a great start. Steering an AI tool well is a skill of its own, the triage still has to be right. Welcome to the game :D

A medium on YesWeHack for a business logic error (CWE-840), nice! Logic bugs don't show up in any scanner, you only find them by actually understanding what the app is supposed to do. That's the skill that keeps paying. Congrats :D

Congrats on the eMAPT! Mobile app pentesting is still one of the less crowded corners of bug bounty, so a cert that forces you to actually hook, patch and intercept apps pays off fast. Go break some APKs :D

4th bounty from the same program, this time an unauthenticated endpoint leaking full roster data. This is why you never leave a program after the first payout: once you know how their devs think, the bugs keep coming :D #bugbounty

hello amazing hackers Stop spraying XSS payloads. Read the reflection context first. That is the whole game :-) 1. Drop a unique harmless string (like ratxss1337) into every param and header you control. 2. Search the response for it. Every hit sits in a context: HTML body, inside an attribute, inside a script block, inside a JS string, or inside a URL (href/src). 3. Break out of THAT context only. Body: open a new tag. Attribute: close the quote and add an event handler. JS string: close the string and end the statement. href: try the javascript: scheme. 4. Blocked? Check what survives: angle brackets, quotes, slashes, parentheses. Whatever survives tells you which trick is left. 5. Ask where the value lands LATER: emails, admin panels, PDF exports, logs. Stored and blind XSS hide there. 6. Prove impact, not alert(1). Show what the script can read or do as the victim: account data, changing an email, actions in their session. Try it today on a free lab: labs.hackxpert.com/ Want the whole path from zero to your first bounty? A discount applies via the link: thexssrat.podia.com/big-beau… Which context catches you out most often? Tell me below.

🐀 Lab of the day on RatCTF: Keyspace. A forgotten Redis cache from a product launch is still online, and nobody knows if it even has a password. Time to find out what's exposed 👀 Free to try: ratctf.com/challenges/redis-… Liked this? The 901 Beginner Web Hacking Guide Bundle is the natural next step, a discount applies via the link: thexssrat.podia.com/901-begi… #infosec #bugbounty #ctf #redis

New lab to hack today: Jeffrey's HR System 🐀 A full HR app with logins and employee records (names, emails, salaries...) — go hunt for access control and injection bugs. Try it: labs.hackxpert.com/Testing%2… #infosec #bugbounty Ready for the next step? A discount applies via the link: thexssrat.podia.com/901-begi…

ZProxy - the minimal proxy browser plugin you didn't know you needed 🐀 Small, fast, and handy for poking at web traffic. Watch it here: youtube.com/watch?v=M11L2sk5… #infosec #bugbounty Next step for the rat pack: the 906 bundle - a discount applies via the link: thexssrat.podia.com/901-begi…

Why are you failing at bug bounties? 25 hard rules for the grind, straight from the XSS Rat: thexssrat.medium.com/the-pro… #bugbounty #infosec Next step if you liked it: the Beginner Web Hacking Guide Bundle (a discount applies via the link) thexssrat.podia.com/901-begi…

Fresh in the SecurityTesting repo: the 2026 Practical Bug Bounty Guide. A full opinionated methodology — platform/program selection, recon workflow, manual exploration with Burp, and a phase-by-phase breakdown of XSS, SSTI, SQLi, IDOR, CSRF, SSRF, XXE, file upload, command injection, auth/session, business logic, GraphQL/OAuth/prototype pollution, WAF bypass, vuln chaining, and how to actually write a report that gets paid. Free, open, updated for 2026. Go read it: github.com/The-XSS-Rat/Secur… Want the structured version of this with labs and guided exercises? The 906 bundle covers that path — a discount applies via the link: thexssrat.podia.com/901-begi… #infosec #bugbounty

Generic courses give you a generic path. 🐀 My 1:1 coaching builds YOURS: we hunt together on your screen, I correct your workflow live, and we shape a plan around your level and your long-term goals. 90-min session: €125. thexssrat.podia.com/coach?co… Also: want to practice? Try RatCTF 👉 ratctf.com/ #bugbounty #mentorship