Jul 21, 2025 · 3 min read · Scenario To complete the skills assessment, answer the questions below. You will need to apply a variety of skills learned in this module, including: Using whois Analysing robots.txt Performing subdomain bruteforcing Crawling and analysing result...
Join discussion
Jul 16, 2025 · 5 min read · Scenario You are given an online academy's IP address but have no further information about their website. As the first step of conducting a Penetration Test, you are expected to locate all pages and domains linked to their IP to enumerate the IP and...
Join discussion
Feb 7, 2025 · 6 min read · Parameter fuzzing is the process of discovering hidden, undocumented, or vulnerable parameters in web applications by sending a large number of test requests. It is an essential technique in web application security testing, bug bounty hunting, and p...
Join discussion
Feb 5, 2025 · 5 min read · This article will cover the Subdomain Enumeration write-up under the Web Fundamentals on THM. Subdomain enumeration is the process of finding valid subdomains for a domain, but why do we do this? We do this to expand our attack surface to try and dis...
Join discussion
Feb 5, 2025 · 10 min read · This article will cover the Content Discovery write-up under the Web Fundamentals on THM. What is Content Discovery Firstly, we should ask, in the context of web application security, what is content? Content can be many things, a file, video, pictur...
Join discussion
Dec 3, 2024 · 5 min read · Le brute-force de sous-domaines est une méthode utilisée pour découvrir des sous-domaines associés à un domaine principal. Elle consiste à essayer une liste de mots pour évaluer des sous-domaines potentiels afin de vérifier leur réel existence. Ces s...
Join discussion
Nov 14, 2024 · 8 min read · Fast fuzzer (ffuf) est un outil outil open-source de fuzzing et de force brute, écrit en langage Go, utilisé pour découvrir des ressources web telles que des fichiers, des répertoires, et des sous-domaines. Le fuzzing est une méthode qui consiste à e...
Join discussion