How To Set Up Your Own Pentesting BlogYo! If you’re coming from YouTube, welcome. If not, this will be a resource for you to get started with building something you can add to your resume and portfolio to help you land your first pentest gig. Once you’re done creating your blog, follow m...Sep 1, 2025 · 5 min readblog.navigatingsecurity.net
Demystifying Web Cache Deception and Web Cache PoisoningLike many of us, I follow several creators on social media to stay updated with the latest in the tech world. Among them is Tiberius, a name synonymous with web application hacking. His posts, especially those on web application security (AppSec) int...Nov 27, 2023 · 2 min readblog.navigatingsecurity.net
How I Studied For The OSWEUpdated July 2025 Today, I'm bringing you a mostly unscripted, chill review of my journey through the OSWE (Offensive Security Web Expert) certification. No need to strap in, because this will not be a long one - I'm just rolling off the dome, sharin...Nov 20, 2023 · 6 min readblog.navigatingsecurity.net
Anatomy of an APIProvider: Host of an API. Consumer: Person/Entity making the request. API Gateway: API management component that acts as an entry point to a web application. The gateway distributes the request to whichever microservice is needed. Can handle security...Apr 22, 2023 · 3 min readblog.navigatingsecurity.net
How To Build A Vulnerable Machine: PlanningWhat's Up? In this series of articles, I will be documenting the basics of building vulnerable machines. Machines you can submit to HTB, THM, Offsec UGC, etc. As the series gets deeper, we will start configuring more complex services and vulnerabilit...Sep 2, 2022 · 4 min readblog.navigatingsecurity.net
