Megathread
https://www.reddit.com/r/Pentesting/comments/1fbi8qo/megathread/

<!-- SC_OFF -->Is there an r/pentesting (https://www.reddit.com/r/pentesting) megathread and if so can you point me to it? Thanks. I just started using Reddit regularly a couple weeks ago so I still don't know how to navigate subs. <!-- SC_ON --> submitted by /u/Weird_Kaleidoscope47 (https://www.reddit.com/user/Weird_Kaleidoscope47)
[link] (https://www.reddit.com/r/Pentesting/comments/1fbi8qo/megathread/) [comments] (https://www.reddit.com/r/Pentesting/comments/1fbi8qo/megathread/)

Freelancing as a Pentester
https://www.reddit.com/r/Pentesting/comments/1fbi9hl/freelancing_as_a_pentester/

<!-- SC_OFF -->I'm a student and currently learning pentesting. I was wondering if I could make a side hustle through pentesting as a freelancer. Like as freelance programmers are hired to build websites, apps, etc., are pentesters hired in such a way too? Or employers just hire as full-time employees? Also, how's the freelance market demand for pentesters? Are any of you doing it on a freelance or contract basis? Kindly share your experience. <!-- SC_ON --> submitted by /u/Expensive_Shock_2545 (https://www.reddit.com/user/Expensive_Shock_2545)
[link] (https://www.reddit.com/r/Pentesting/comments/1fbi9hl/freelancing_as_a_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/1fbi9hl/freelancing_as_a_pentester/)

cyberExploring Client-Side Desync: Understanding the Risk and Mitigating the Threat
https://cyberw1ng.medium.com/cyberexploring-client-side-desync-understanding-the-risk-and-mitigating-the-threat-b375dec78f21?source=rss------bug_bounty-5

Bug Bounty Essentials by Karthikeyan NagarajContinue reading on Medium » (https://cyberw1ng.medium.com/cyberexploring-client-side-desync-understanding-the-risk-and-mitigating-the-threat-b375dec78f21?source=rss------bug_bounty-5)

The Only Oscp Tip You Need

You are Not a Medium Member — NO Problem: Here is a Friend-LinkContinue reading on Medium »
Read more...

JSON Web Token attacks (JWT)
https://abdelrahmansalaheldeen.medium.com/json-web-token-attacks-jwt-c082d76f3e4c?source=rss------bug_bounty-5

JSON Web Token attacks بالعربيContinue reading on Medium » (https://abdelrahmansalaheldeen.medium.com/json-web-token-attacks-jwt-c082d76f3e4c?source=rss------bug_bounty-5)

The Only Oscp Tip You Need
https://medium.com/@issam.qsous/the-only-oscp-tip-you-need-cfac65948f68?source=rss------bug_bounty-5

You are Not a Medium Member — NO Problem: Here is a Friend-LinkContinue reading on Medium » (https://medium.com/@issam.qsous/the-only-oscp-tip-you-need-cfac65948f68?source=rss------bug_bounty-5)

Lap 1: JWT authentication bypass via unverified signature
https://abdelrahmansalaheldeen.medium.com/lap-1-jwt-authentication-bypass-via-unverified-signature-8e450a7b2f59?source=rss------bug_bounty-5

PortSwigger JWT attacks lap one writeup بالعربيContinue reading on Medium » (https://abdelrahmansalaheldeen.medium.com/lap-1-jwt-authentication-bypass-via-unverified-signature-8e450a7b2f59?source=rss------bug_bounty-5)

JSON Web Token attacks (JWT)

JSON Web Token attacks بالعربيContinue reading on Medium »
Read more...

Lap 1: JWT authentication bypass via unverified signature

PortSwigger JWT attacks lap one writeup بالعربيContinue reading on Medium »
Read more...

0-Click Mass Account Takeover via Password Reset Functionality

In the name of Allah, the Most Beneficent, the Most MercifulContinue reading on Medium »
Read more...

0-Click Mass Account Takeover via Password Reset Functionality
https://0d-samii.medium.com/0-click-mass-account-takeover-via-password-reset-functionality-68cdf27e028d?source=rss------bug_bounty-5

In the name of Allah, the Most Beneficent, the Most MercifulContinue reading on Medium » (https://0d-samii.medium.com/0-click-mass-account-takeover-via-password-reset-functionality-68cdf27e028d?source=rss------bug_bounty-5)