Today, let’s discuss a few recurring yet challenging security issues that many developers grapple with — SQL injection, CSRF …Continue reading on Medium » (https://medium.com/@kerstan/how-can-sql-injection-csrf-and-xss-attacks-be-prevented-in-golang-bug-bounty-tuesday-2f857b2e4b53?source=rss------bug_bounty-5)

How can SQL injection, CSRF, and XSS attacks be prevented in Golang — Bug Bounty Tuesday

Today, let’s discuss a few recurring yet challenging security issues that many developers grapple with — SQL injection, CSRF …Continue reading on Medium »
Read more...

Find Open Redirect in Just 2 min - $1000

The Secrets of Web Application Security Vulnerabilities!Continue reading on Medium »
Read more...

Web cache poisoning explained

Web cache poisoning involves manipulating the web cache to store harmful content, which is then delivered to other users.Continue reading on Medium »
Read more...

How I get Open Redirect Vulnerability in BBP ?

First, I’m Kerolos Ayman, Bug Bounty Hunter, Junior Penetration Tester and CTF player.Continue reading on Medium »
Read more...

Find Open Redirect in Just 2 min - $1000
https://medium.com/@mdnafeed3/find-open-redirect-in-just-2-min-1000-c527bb3e65fb?source=rss------bug_bounty-5

The Secrets of Web Application Security Vulnerabilities!Continue reading on Medium » (https://medium.com/@mdnafeed3/find-open-redirect-in-just-2-min-1000-c527bb3e65fb?source=rss------bug_bounty-5)

Web cache poisoning explained
https://medium.com/@ad.abhi0013/web-cache-poisoning-explained-f3ddc4bfbf94?source=rss------bug_bounty-5

Web cache poisoning involves manipulating the web cache to store harmful content, which is then delivered to other users.Continue reading on Medium » (https://medium.com/@ad.abhi0013/web-cache-poisoning-explained-f3ddc4bfbf94?source=rss------bug_bounty-5)

How I get Open Redirect Vulnerability in BBP ?
https://medium.com/@keroayman77/how-i-get-open-redirect-vulnerability-in-bbp-6006e5a34602?source=rss------bug_bounty-5

First, I’m Kerolos Ayman, Bug Bounty Hunter, Junior Penetration Tester and CTF player.Continue reading on Medium » (https://medium.com/@keroayman77/how-i-get-open-redirect-vulnerability-in-bbp-6006e5a34602?source=rss------bug_bounty-5)

My step by step process on how I do Bug Bounty Hunting: From finding targets to Submission of the…

So after our recon part where we gather all of the subdomains we’ll proceed to check all live host and crawl it, the way I do it is to use…Continue reading on Medium »
Read more...

My step by step process on how I do Bug Bounty Hunting: From finding targets to Submission of the…
https://pwndecoco.medium.com/my-step-by-step-process-on-how-i-do-bug-bounty-hunting-from-finding-targets-to-submission-of-the-c3ad5d4b07ad?source=rss------bug_bounty-5

So after our recon part where we gather all of the subdomains we’ll proceed to check all live host and crawl it, the way I do it is to use…Continue reading on Medium » (https://pwndecoco.medium.com/my-step-by-step-process-on-how-i-do-bug-bounty-hunting-from-finding-targets-to-submission-of-the-c3ad5d4b07ad?source=rss------bug_bounty-5)

Looking for pentesting job
https://www.reddit.com/r/Pentesting/comments/1gext5i/looking_for_pentesting_job/

<!-- SC_OFF -->Howdy, I'm looking to break into the field of pentesting. I have 2 years in IT service desk. Mostly working with AD and Azure. My certs: OSCP, PNPT, AZ-104, a few compita (CySA, Sec, Net, A). I got the OSCP a few months ago. I've applied to 20 - 30 pentesting jobs and I haven't heard back from any of them. I've tried reaching out to recruiters on linkedin and that hasn't helped either. I live in Colorado, and I'm open for in-person or remote work. Any advice or help would be greatly appreciated! <!-- SC_ON --> submitted by /u/Mammoth_Experience61 (https://www.reddit.com/user/Mammoth_Experience61)
[link] (https://www.reddit.com/r/Pentesting/comments/1gext5i/looking_for_pentesting_job/) [comments] (https://www.reddit.com/r/Pentesting/comments/1gext5i/looking_for_pentesting_job/)

How Can I Build Strong Skills for a Cybersecurity Career Without Expensive Certs?
https://www.reddit.com/r/Pentesting/comments/1geyhbm/how_can_i_build_strong_skills_for_a_cybersecurity/

<!-- SC_OFF -->Hey everyone! I’m a second-year cybersecurity student in a three-year program, and I’m looking to maximize the next year to build strong skills in pentesting, networking, and general system security. Right now, I can’t afford certifications like OSCP , eJPT or similar. So I’m hoping to find solid resources and a focused plan that can get me job-ready by graduation. I’d love to know if anyone has been able to develop solid skills on a budget and what specific areas you recommend focusing on. What free or affordable resources helped you the most? And how can I structure my learning to make consistent progress? Thanks in advance for any guidance you can share i really appreciate it! <!-- SC_ON --> submitted by /u/Own_Soup_2072 (https://www.reddit.com/user/Own_Soup_2072)
[link] (https://www.reddit.com/r/Pentesting/comments/1geyhbm/how_can_i_build_strong_skills_for_a_cybersecurity/) [comments] (https://www.reddit.com/r/Pentesting/comments/1geyhbm/how_can_i_build_strong_skills_for_a_cybersecurity/)

I (common user) was breached, is dual boot enough for me?
https://www.reddit.com/r/Pentesting/comments/1gf15y9/i_common_user_was_breached_is_dual_boot_enough/

<!-- SC_OFF -->Recently I was a victim of credit card fraud, with a virtual card being compromised and maxed out. My best guess is that my card number, cvv and date were extracted via keylogger or similar, since it was a virtual card leaving a physical attack out of the question. I was thinking of doing a clean install and using dual boot. A windows partition for gaming and downloads (probably my breach) and a Linux partition for making online purchases and general personal finance. Would you have any suggestions? <!-- SC_ON --> submitted by /u/ElMage21 (https://www.reddit.com/user/ElMage21)
[link] (https://www.reddit.com/r/Pentesting/comments/1gf15y9/i_common_user_was_breached_is_dual_boot_enough/) [comments] (https://www.reddit.com/r/Pentesting/comments/1gf15y9/i_common_user_was_breached_is_dual_boot_enough/)