Tag feed

#pentesting

496 posts282 followers

Trending tags this week

Hijacking iOS Deep Links in a Health App Using Custom URL Schemes

14h ago · 9 min read · Overview During a recent pentest of an iOS health application (let's call it MedVault), I came across something interesting. The app was using custom URL schemes for deep linking but had no Universal

ALArchit and 1 more commented

LVLong Volongvh0904.hashnode.dev

0

HTB Attack Diary — Garfield (Hard, Windows)

1d ago · 43 min read · Introduction Garfield is a Hard-rated Windows machine that simulates a realistic Active Directory environment with a primary Domain Controller (DC01) and a Read-Only Domain Controller (RODC01). You're

Join discussion

AWAlan Westalan-west.hashnode.dev

0

How to Run AI-Assisted Pentesting Locally Without Leaking Client Data

1d ago · 6 min read · You're halfway through an engagement, staring at a terminal full of Nmap output, and you think: "I wish I could just ask an AI to help me parse this." So you paste it into ChatGPT. Then you realize you just sent your client's internal network topolog...

Join discussion

LVLong Volongvh0904.hashnode.dev

0

Attack Diary: HackTheBox — Cap

3d ago · 11 min read · Introduction Today's target goes by the name Cap — an Easy-rated machine on HackTheBox. Easy or not, you never know until you try. This is my diary of the entire journey, from knowing nothing about th

Join discussion

EEEmma Engströmpentesting-dvwa.hashnode.dev

0

DOM-Based XSS in DVWA

Mar 29 · 14 min read · Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code

Join discussion

WBWiktoria Blomgren Strandbergpentesting-dvwa.hashnode.dev

0

JavaScript Attacks in DVWA

Mar 26 · 20 min read · 1 Introduction In this post, the JavaScript Attacks vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to analyse and manipulate the J

Join discussion

EEEmma Engströmpentesting-dvwa.hashnode.dev

0

Stored XSS in DVWA

Mar 25 · 12 min read · Introduction This post examines a Stored Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA), and demonstrates how it can be used to achieve persistent client-side c

Join discussion

WBWiktoria Blomgren Strandbergpentesting-dvwa.hashnode.dev

0

API Security in DVWA

Mar 21 · 24 min read · 1 Introduction In this post, the API Security vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks across all security levels is to exploit weaknesses in

Join discussion

EEEmma Engströmpentesting-dvwa.hashnode.dev

0

Reflected XSS in DVWA

Mar 19 · 14 min read · Introduction This post demonstrates how a reflected Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to execute malicious client-side scripts in

Join discussion

WBWiktoria Blomgren Strandbergpentesting-dvwa.hashnode.dev

0

CSP Bypass in DVWA

Mar 14 · 13 min read · 1 Introduction In this post, the Content Security Policy (CSP) Bypass vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass the

Join discussion

#pentesting

Search Hashnode

#pentesting

Trending tags this week

Hijacking iOS Deep Links in a Health App Using Custom URL Schemes

HTB Attack Diary — Garfield (Hard, Windows)

How to Run AI-Assisted Pentesting Locally Without Leaking Client Data

Attack Diary: HackTheBox — Cap

DOM-Based XSS in DVWA

JavaScript Attacks in DVWA

Stored XSS in DVWA

API Security in DVWA

Reflected XSS in DVWA

CSP Bypass in DVWA