#pentesting articles

TVThuriaanandh Vthuriaanandh-sec.hashnode.devJun 14 · 19 min read

SQL Injection Labs (Portswigger)

If you want a second reference alongside this, Rana Khalil's Web Security Academy series on GitHub covers these too and is worth a look once you've had your own "wait, why is this query failing" momen

0

TVThuriaanandh Vthuriaanandh-sec.hashnode.devJun 14 · 14 min read

I Broke CORS Three Times on Purpose (PortSwigger Academy Writeup)

If you've ever stared at an Access-Control-Allow-Origin header and thought "yeah that looks fine," congratulations, you're exactly the kind of developer these labs are designed to humble. I just finis

0

EAErkan Aksoyerkanaksoy.hashnode.devJun 11 · 11 min read

Why I Run Azure and Entra ID Pentesting From Linux

Introduction Most people meet Azure security through the portal. You click around, read some role assignments, maybe run a few az commands, and it can feel like the whole job lives in a browser tab. I

0

NPNarges Pourkamalisafeai.blogJun 8 · 8 min read

PortSwigger's Insights: Understanding Web LLM Attacks

PortSwigger has taken an important step towards understanding LLM attacks. I studied this topic and wrote down the key points to better understand it. 1. Fundamental Concepts Learn a little more about

4

LR

JJebitoksharonjebitok.comJun 6 · 19 min read

Guided Pentest: Web

Link to the Walkthrough/Challenge on TryHackMe: Guided Pentest: Web Introduction Imagine you have been hired as a penetration tester. Your client runs a small web application called RecruitX, an inter

0

MCMyles Coreym2crazzy.hashnode.devJun 3 · 3 min read

TryHackMe Ice 1-4

To solve this first task i ran the nmap -sV scan inside nmap and on port 3389 it has a service called MS-WBT-Server which is an Microsoft remote desktop service. So the answer the first question is 33

0

AOAbiodun Oluwafunmibifunmibitech.hashnode.devJun 2 · 5 min read

Why Developers Should Learn About Penetration Testing

Most developers build. Penetration testers break. But what if the person building also understood how things get broken? That's where the most dangerous — and most valuable — developers live. What is

0

MCMyles Coreym2crazzy.hashnode.devJun 2 · 3 min read

UnrealIRCd Backdoor

To begin this challenge, I used Nmap's service version detection feature to identify the services running on the target's open ports. The scan revealed 22 open ports. After reviewing the results, I de

0

Aabdulwasayhuman-led-penetration-testing.hashnode.devJun 2 · 2 min read

Why Automated Vulnerability Scanners Can’t Replace Human-Led Penetration Testing

The cyber threat landscape has moved past the era of predictable, script-based attacks. In today's decentralized business environments, legacy threat vectors have evolved into highly sophisticated, mu

0

PHPablo Huertaspablohuertas.devMay 28 · 18 min read

Why most vulnerability scans miss what matters: A practitioner's take

I've run a ton of vulnerability scans over the years. Automated, manual, or using tools like WPScan and Nessus to do the heavy lifting. After a while, you start to notice something uncomfortable: the

0

#pentesting

Search Hashnode