Jul 25, 2025 · 2 min read · Scenario You are contracted to perform a penetration test for a company, and through your pentest, you stumble upon an interesting file manager web application. As file managers tend to execute system commands, you are interested in testing for comma...
Join discussion
Jul 24, 2025 · 3 min read · Scenario Our client tasks us with assessing a SOAP web service whose WSDL file resides at http://<TARGET IP>:3002/wsdl?wsdl. Assess the target, identify an SQL Injection vulnerability through SOAP messages and answer the question below. Submit the pa...
Join discussion
Jul 24, 2025 · 3 min read · Scenario You are tasked to perform a security assessment of a client's web application. For the assessment, the client has not provided you with credentials. Apply what you have learned in this module to obtain the flag. Walkthrough Navigate to the t...
Join discussion
Jul 21, 2025 · 3 min read · Scenario To complete the skills assessment, answer the questions below. You will need to apply a variety of skills learned in this module, including: Using whois Analysing robots.txt Performing subdomain bruteforcing Crawling and analysing result...
Join discussion
Jul 21, 2025 · 3 min read · Scenario - Part 1 The first part of the skills assessment will require you to brute-force the the target instance. Successfully finding the correct login will provide you with the username you will need to start Skills Assessment Part 2. You might fi...
Join discussion
Jul 19, 2025 · 3 min read · Scenario During our Penetration Test, we came across a web server that contains JavaScript and APIs. We need to determine their functionality to understand how it can negatively affect our customer. Walkthrough Q1 - Try to study the HTML code of the ...
Join discussion
Jul 18, 2025 · 4 min read · Scenario You have been contracted to perform an external penetration test against the company INLANEFREIGHT that is hosting one of their main public-facing websites on WordPress. Enumerate the target thoroughly using the skills learned in this module...
Join discussion
Jul 16, 2025 · 5 min read · Scenario You are given an online academy's IP address but have no further information about their website. As the first step of conducting a Penetration Test, you are expected to locate all pages and domains linked to their IP to enumerate the IP and...
Join discussion
Jul 15, 2025 · 3 min read · Scenario We are performing internal penetration testing for a local company. As you come across their internal web applications, you are presented with different situations where Burp/ZAP may be helpful. Read each of the scenarios in the questions be...
Join discussion
Jul 14, 2025 · 5 min read · Scenario The company INLANEFREIGHT has contracted you to perform a web application assessment against one of their public-facing websites. They have been through many assessments in the past but have added some new functionality in a hurry and are pa...
Join discussion