Tag feed

#pentesting

506 posts282 followers

Trending tags this week

W1seGuy (CTF) Writeup | TryHackMe

2d ago · 7 min read · "A w1se guy 0nce said, the answer is usually as plain as day." 🔗 Link to W1seGuy room . In this room, we are going to break down a classic cryptographic vulnerability: the Repeating-Key XOR Cipher.

Join discussion

CC9labc9lab.hashnode.dev

0

Android Pentesting 02: First Steps to Finding App Flaws

2d ago · 5 min read · Welcome to the second chapter of my Mobile Penetration Testing Series, where we’re turning you into a mobile app security pro! In Part 1, you learned what Android pentesting is, how Android and iOS di

Join discussion

CC9labc9lab.hashnode.dev

0

Android Pentesting 01

2d ago · 5 min read · Welcome to the first chapter of my Mobile Penetration Testing Series, where we guide you from a beginner to a skilled mobile app tester! Imagine yourself as a digital detective, exploring Android and

Join discussion

WBWiktoria Blomgren Strandbergpentesting-dvwa.hashnode.dev

0

Blind SQL Injection in DVWA

3d ago · 27 min read · 1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQL

Join discussion

MQMax Quimbycomputeleap.hashnode.dev

0

Shannon AI Review: Autonomous Web Pentesting Agent

6d ago · 3 min read · title: "Shannon AI Review: Autonomous Web Pentesting Agent" published: true description: "Shannon autonomously pentests web apps at 96% XBOW success for ~$50 a run. We review how it works, what it misses, and who should use it." tags: [security, ai, ...

Join discussion

WBWiktoria Blomgren Strandbergpentesting-dvwa.hashnode.dev

0

Insecure CAPTCHA in DVWA

Apr 18 · 27 min read · 1 Introduction In this post, the Insecure CAPTCHA vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass the poor CAPTCHA system

Join discussion

SXStavro Xhardhadispatchersdotplayground.hashnode.dev

0

Hijacking AIDL Interfaces

Apr 16 · 4 min read · Two years ago, I wrote an introduction article for how components communicate with each-other across the whole Android system. This article would assume that the reader has some knowledge about inter-

Join discussion

LVLong Volongvh0904.hashnode.dev

0

HTB Attack Diaries — Silentium

Apr 14 · 17 min read · Introduction An Easy box that taught me the hardest lesson: read the CVE before you start shooting Silentium is an Easy-rated Linux box centered around FlowiseAI, a low-code AI agent platform, and G

Join discussion

WBWiktoria Blomgren Strandbergpentesting-dvwa.hashnode.dev

0

Weak Session IDs in DVWA

Apr 12 · 16 min read · 1 Introduction In this post, the Weak Session IDs vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to work out how the ID is generat

Join discussion

ADAditya Dixitblog.dixitaditya.com

3

Hijacking iOS Deep Links in a Health App Using Custom URL Schemes

Apr 9 · 9 min read · Overview During a recent pentest of an iOS health application (let's call it MedVault), I came across something interesting. The app was using custom URL schemes for deep linking but had no Universal

LALaura and 2 more commented

#pentesting

Search Hashnode

#pentesting

Trending tags this week

W1seGuy (CTF) Writeup | TryHackMe

Android Pentesting 02: First Steps to Finding App Flaws

Android Pentesting 01

Blind SQL Injection in DVWA

Shannon AI Review: Autonomous Web Pentesting Agent

Insecure CAPTCHA in DVWA

Hijacking AIDL Interfaces

HTB Attack Diaries — Silentium

Weak Session IDs in DVWA

Hijacking iOS Deep Links in a Health App Using Custom URL Schemes