Continue reading on Medium » (https://d3xxyz.medium.com/d%CE%BEx-bug-bounty-5e1d0c7f8408?source=rss------bug_bounty-5)

XSS TÜRLERİ TEST CASE
https://medium.com/@aarda418/xss-t%C3%BCrleri%CC%87-test-case-a4ab5849100f?source=rss------bug_bounty-5

Selamlar ben Arda Aslan. Gallipoli Bug Bounty topluluğunun ikinci task i olarak bu blogu hazırladım. Keyifli okumalar…Continue reading on Medium » (https://medium.com/@aarda418/xss-t%C3%BCrleri%CC%87-test-case-a4ab5849100f?source=rss------bug_bounty-5)

Airbnb — When Bypassing JSON Encoding, XSS Filter, WAF, CSP, and Auditor turns into Eight…
https://medium.com/@proseizala/airbnb-when-bypassing-json-encoding-xss-filter-waf-csp-and-auditor-turns-into-eight-92a004f1cbe8?source=rss------bug_bounty-5

Learn More About Cyber Security , Hacking And Get Your First Certificate For Free On …Continue reading on Medium » (https://medium.com/@proseizala/airbnb-when-bypassing-json-encoding-xss-filter-waf-csp-and-auditor-turns-into-eight-92a004f1cbe8?source=rss------bug_bounty-5)

Account Takeover via Weak Reset Token Entropy
https://medium.com/@majix_de/account-takeover-via-weak-reset-token-entropy-c475268daae6?source=rss------bug_bounty-5

Diving in how entropy can affect the security of reset tokens and may lead to account takeovers.Continue reading on Medium » (https://medium.com/@majix_de/account-takeover-via-weak-reset-token-entropy-c475268daae6?source=rss------bug_bounty-5)

Nmap Cheat Sheet For Penetration Testing.
https://medium.com/@umarhere4u/nmap-cheat-sheet-for-penetration-testing-70b555b91285?source=rss------bug_bounty-5

Target Specification:Continue reading on Medium » (https://medium.com/@umarhere4u/nmap-cheat-sheet-for-penetration-testing-70b555b91285?source=rss------bug_bounty-5)

Nmap Cheat Sheet For Penetration Testing.

Target Specification:Continue reading on Medium »
Read more...

Need Tipps
https://www.reddit.com/r/Pentesting/comments/1dyzwds/need_tipps/

<!-- SC_OFF -->Hello Guys I want ask you all pentesters for Tipps for finding vurbebulitys in web applications. I know the basics like Owasp, Burpsuit and nmap but is there more tools or how can I find vurbebulitys manually. <!-- SC_ON --> submitted by /u/AirlineCurious3456 (https://www.reddit.com/user/AirlineCurious3456)
[link] (https://www.reddit.com/r/Pentesting/comments/1dyzwds/need_tipps/) [comments] (https://www.reddit.com/r/Pentesting/comments/1dyzwds/need_tipps/)

Complex Attack Types: Sample Scenarios 38

In this article, we will hijack the machine in front of us with our technical knowledge and target-oriented cyber security tools. We will…Continue reading on Medium »
Read more...

any good resources for learning powershell? also how am i supposed to virtualize these complex ad setups? do i just do small bits of it or what? im trying to start with red teaming
https://www.reddit.com/r/redteamsec/comments/1dz3d6o/any_good_resources_for_learning_powershell_also/

submitted by /u/Total_Ad7843 (https://www.reddit.com/user/Total_Ad7843)
[link] (https://github.com/davidprowe/BadBlood) [comments] (https://www.reddit.com/r/redteamsec/comments/1dz3d6o/any_good_resources_for_learning_powershell_also/)

Seeking Advice from VAPT Experts in Our Community!
https://www.reddit.com/r/Pentesting/comments/1dz3bqh/seeking_advice_from_vapt_experts_in_our_community/

<!-- SC_OFF -->Hey everyone, I'm reaching out to our community of VAPT experts for some guidance. As someone enthusiastic about VAPT, I'm keen to hear from those who have extensive experience in this specialized field. Could you share your career journey and insights into VAPT? What certifications have been most valuable to you, and why? Any tips or advice you can offer would be incredibly helpful for someone like me who is passionate about entering this challenging yet rewarding area. Looking forward to hearing your thoughts and learning from your experiences! <!-- SC_ON --> submitted by /u/2x7r (https://www.reddit.com/user/2x7r)
[link] (https://www.reddit.com/r/Pentesting/comments/1dz3bqh/seeking_advice_from_vapt_experts_in_our_community/) [comments] (https://www.reddit.com/r/Pentesting/comments/1dz3bqh/seeking_advice_from_vapt_experts_in_our_community/)

Hide And Seek With Active Directory: Secrets For Persistence and Deception
https://www.reddit.com/r/redteamsec/comments/1dz3x22/hide_and_seek_with_active_directory_secrets_for/

submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://youtu.be/3KzyE-J_xEw) [comments] (https://www.reddit.com/r/redteamsec/comments/1dz3x22/hide_and_seek_with_active_directory_secrets_for/)

Pen-Testing Experience Help
https://www.reddit.com/r/Pentesting/comments/1dz3re4/pentesting_experience_help/

<!-- SC_OFF --> Opinions from actual Pen-Testers is preferred, but I am open to all insight :) Hello. Currently I am just out of College with a BSc in Cyber Security and I am planning to do help-desk just to get stuck-into an IT environment. While I am on help-desk, I will be completing my pen-test qualifications and gaining hacking and coding experience on the side. I'm just wondering, once I have all of the relevant Pen-Testing qualifications, hacking and coding abilities, how would you recommend that I get actual work-place Pen-Testing experience, when all companies require prior Pen-Testing experience? Should I ask to do work-experience by asking to shadow Pen-Testers or something like that? Or should I do my own Pen-Testing projects? Really curious to know how all of the pen-testers in this subreddit managed to gain experience with no experience and successfully attain a job in pen-testing. I would love and really appreciate your insight if you can! <!-- SC_ON --> submitted by /u/Snakeygreen (https://www.reddit.com/user/Snakeygreen)
[link] (https://www.reddit.com/r/Pentesting/comments/1dz3re4/pentesting_experience_help/) [comments] (https://www.reddit.com/r/Pentesting/comments/1dz3re4/pentesting_experience_help/)

10 tips and questions to help you find secondary context bugs — Bug Bounty Tuesday

Today is Bug bounty Tuesday, I will share with you about 10 tips and questions to help you find secondary context bugs…Continue reading on Medium »
Read more...

Subdomain Enumeration

Well, subdomain enumeration is important when you are hunting on wildcard enable scope programs. If you are able to get unique subdomains…Continue reading on Medium »
Read more...

What Is The Attacks On Application Layer!

Continue reading on Medium »
Read more...