Is greyhack the game a good intro
https://www.reddit.com/r/Pentesting/comments/1e7vqlb/is_greyhack_the_game_a_good_intro/

<!-- SC_OFF -->I know it’s just a game, but for a beginner like me I’ve been using hackthebox for my learning. I also play hacknet. Prolly sound like a lot of noobs out there but just getting started. I feel like the game gets me familiar with the Unix commands. Any other tips for a beginner? <!-- SC_ON --> submitted by /u/Deep-Mycologist150 (https://www.reddit.com/user/Deep-Mycologist150)
[link] (https://www.reddit.com/r/Pentesting/comments/1e7vqlb/is_greyhack_the_game_a_good_intro/) [comments] (https://www.reddit.com/r/Pentesting/comments/1e7vqlb/is_greyhack_the_game_a_good_intro/)

suspicious activity
https://www.reddit.com/r/Pentesting/comments/1e7x3ko/suspicious_activity/

<!-- SC_OFF -->After reading a review of Treasure NFT on scamadviser.com I started doing some research on this. Screenshot (https://preview.redd.it/bybx8597podd1.png?width=1156&format=png&auto=webp&s=621a6739cf68d0a2c91d7f223b38fcde38048162) https://www.scamadviser.com/check-website/treasurenft.xyz?__cf_chl_rt_tk=OpiStaxMSR4lxlvjVvkTIDfhdxV041do4hXE1VI9cGY-1721456309-0.0.1.1-5802 what do you think about it ? Is this site is accessible in your country ? Website : https://treasurenft.xyz/ Is this app is available in your country ? App Store (ios) : https://apps.apple.com/us/app/treasurenft-trade-earn-nfts/id6444782351 Google play store (android) : https://play.google.com/store/apps/details?id=com.wanda.treasurenft <!-- SC_ON --> submitted by /u/sagarbiswas1 (https://www.reddit.com/user/sagarbiswas1)
[link] (https://www.reddit.com/r/Pentesting/comments/1e7x3ko/suspicious_activity/) [comments] (https://www.reddit.com/r/Pentesting/comments/1e7x3ko/suspicious_activity/)

This is how i escalated self XSS with CSRF

Hi guys, Hope you are doing great, i am Pavan, Today i am going to share how i escalated a self XSS with CSRF.Continue reading on Medium »
Read more...

The Type of Bug That We Can’t See

Advanced XXE Injection- The Blind and CDATA KindContinue reading on ILLUMINATION »
Read more...

Business Logic Flaws A Critical Look at Business Application Security

In today’s rapidly evolving digital landscape, businesses rely heavily on complex applications to manage their operations, connect with…Continue reading on Medium »
Read more...

Zero-Day Vulnerabilities The Silent Threat to Cybersecurity

In the dynamic realm of cybersecurity, few threats are as elusive and potentially devastating as zero-day vulnerabilities. These security…Continue reading on Medium »
Read more...

Discovering an XML File Upload Vulnerability Lead to SSRF: My Bug Hunting Journey

Author: Javroot, Bug HunterContinue reading on Medium »
Read more...

Basic Pentesting 1 Walkthrough

Hello, in this article I will show you step by step how to solve Basic Pentesting 1. The purpose of this CTF will be to become root. Click…Continue reading on Medium »
Read more...

This is how i escalated self XSS with CSRF
https://medium.com/@pvnk24/this-is-how-i-escalated-self-xss-with-csrf-80113ab3080e?source=rss------bug_bounty-5

Hi guys, Hope you are doing great, i am Pavan, Today i am going to share how i escalated a self XSS with CSRF.Continue reading on Medium » (https://medium.com/@pvnk24/this-is-how-i-escalated-self-xss-with-csrf-80113ab3080e?source=rss------bug_bounty-5)

does pentesting = 9-5 ?
https://www.reddit.com/r/Pentesting/comments/1e82py6/does_pentesting_95/

<!-- SC_OFF -->i’m wondering what the work hours of most pentesters are looking like . does pentesting only come in a full time 9-5 format ? how does it work ? after getting a pentesting job would i have time for any of my other work ? (modeling and music) <!-- SC_ON --> submitted by /u/AlexandreKingsworth (https://www.reddit.com/user/AlexandreKingsworth)
[link] (https://www.reddit.com/r/Pentesting/comments/1e82py6/does_pentesting_95/) [comments] (https://www.reddit.com/r/Pentesting/comments/1e82py6/does_pentesting_95/)

Comp-Sci or Cybersecurity Degree?
https://www.reddit.com/r/Pentesting/comments/1e85r40/compsci_or_cybersecurity_degree/

<!-- SC_OFF -->Good afternoon, soldiers. I am currently employed as Desktop support (tier 2 support) and enrolled in WGU for Cyber Security with the career goal of becoming a Pen-tester / Ethical Hacker. I just secured my A+ certification and I am now working on Network+ then security+ before switching to computer science degree next term. I still have 5 months before I have to commit to my decision I wanted to ask you guys your opinions. As Pentesters do you believe there is more value in understanding computer architecture and programming or would it be better to stick to the security concepts and certifications that a Cyber degree offers? Personally I find programming more difficult than security concepts <!-- SC_ON --> submitted by /u/heavymetalusa (https://www.reddit.com/user/heavymetalusa)
[link] (https://www.reddit.com/r/Pentesting/comments/1e85r40/compsci_or_cybersecurity_degree/) [comments] (https://www.reddit.com/r/Pentesting/comments/1e85r40/compsci_or_cybersecurity_degree/)

TryHackMe — NahamStore — Walkthrough

In this room you will learn the basics of bug bounty hunting and web application hacking.Continue reading on Medium »
Read more...

TryHackMe — NahamStore — Walkthrough
https://medium.com/@nayanjyoti16/tryhackme-nahamstore-walkthrough-d4ecfe586c96?source=rss------bug_bounty-5

In this room you will learn the basics of bug bounty hunting and web application hacking.Continue reading on Medium » (https://medium.com/@nayanjyoti16/tryhackme-nahamstore-walkthrough-d4ecfe586c96?source=rss------bug_bounty-5)

CVE-2024–40725 and CVE-2024–40898: Critical Vulnerabilities in Apache HTTP Server

Explore the details of CVE-2024–40725 and CVE-2024–40898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks…Continue reading on InfoSec Write-ups »
Read more...

CVE-2024–40725 and CVE-2024–40898: Critical Vulnerabilities in Apache HTTP Server
https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5

Explore the details of CVE-2024–40725 and CVE-2024–40898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)

How I bypassed payment in one of the popular mobile apk and got free subsciption

Helloo hackers, I hope you are doing well, in this blog I’m gonna show you how I bypassed the payment in one of the popular talking…Continue reading on Medium »
Read more...

How To Setup Private Interactsh Server

Setting Up Your Own Private OOB Vulnerability Discovery ServerContinue reading on Medium »
Read more...