Beginner in ethical hacking — starting to see the power of scripting (need advice!)
https://www.reddit.com/r/Pentesting/comments/1mnrseb/beginner_in_ethical_hacking_starting_to_see_the/
<!-- SC_OFF -->Hey everyone, I’m new to the ethical hacking / cybersecurity space, and I think I’m starting to get it. Recently I learned about regular expressions — I haven’t really used them yet — but just understanding what they can do made me realize how much more powerful scripting becomes when you know the right tools and techniques. It’s like a lightbulb went off: You can make a script that doesn’t just run commands, but actually thinks about the data it’s handling. You can automate boring, repetitive steps and focus on the interesting parts of the job. You can build your own mini-tools instead of relying only on prebuilt ones. I’m still very much a beginner — I’m just now experimenting with Bash, Python, and a bit of PowerShell — but I want to start building useful tools and automations that help with recon, log parsing, OSINT, pentesting, web hacking and general workflow efficiency. For those with more experience: What skills or concepts gave you the biggest leap forward when you were starting? Any “aha moments” where scripting completely changed how you worked? How do you decide when to build your own tool vs. just use an existing one? Any resources or practice ideas for combining scripting with cybersecurity work? Also, I’d love to hear stories — both successes and mistakes — about scripting in real-world security contexts. Thanks in advance. I’m just getting started, but now i see scripting everywhere i look. - A beginner trying to level up <!-- SC_ON --> submitted by /u/Cheap-Ad-957 (https://www.reddit.com/user/Cheap-Ad-957)
[link] (https://www.reddit.com/r/Pentesting/comments/1mnrseb/beginner_in_ethical_hacking_starting_to_see_the/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mnrseb/beginner_in_ethical_hacking_starting_to_see_the/)
https://www.reddit.com/r/Pentesting/comments/1mnrseb/beginner_in_ethical_hacking_starting_to_see_the/
<!-- SC_OFF -->Hey everyone, I’m new to the ethical hacking / cybersecurity space, and I think I’m starting to get it. Recently I learned about regular expressions — I haven’t really used them yet — but just understanding what they can do made me realize how much more powerful scripting becomes when you know the right tools and techniques. It’s like a lightbulb went off: You can make a script that doesn’t just run commands, but actually thinks about the data it’s handling. You can automate boring, repetitive steps and focus on the interesting parts of the job. You can build your own mini-tools instead of relying only on prebuilt ones. I’m still very much a beginner — I’m just now experimenting with Bash, Python, and a bit of PowerShell — but I want to start building useful tools and automations that help with recon, log parsing, OSINT, pentesting, web hacking and general workflow efficiency. For those with more experience: What skills or concepts gave you the biggest leap forward when you were starting? Any “aha moments” where scripting completely changed how you worked? How do you decide when to build your own tool vs. just use an existing one? Any resources or practice ideas for combining scripting with cybersecurity work? Also, I’d love to hear stories — both successes and mistakes — about scripting in real-world security contexts. Thanks in advance. I’m just getting started, but now i see scripting everywhere i look. - A beginner trying to level up <!-- SC_ON --> submitted by /u/Cheap-Ad-957 (https://www.reddit.com/user/Cheap-Ad-957)
[link] (https://www.reddit.com/r/Pentesting/comments/1mnrseb/beginner_in_ethical_hacking_starting_to_see_the/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mnrseb/beginner_in_ethical_hacking_starting_to_see_the/)
Curious about new platform Hackcubes?
https://www.reddit.com/r/Pentesting/comments/1mnvkt7/curious_about_new_platform_hackcubes/
<!-- SC_OFF -->I stumbled upon a new platform called HackCubes (hackcubes.com) that has an invite-style challenge, kind of like the one HackTheBox used to have back in the day. It’s still pretty new, so I’m curious to see how it turns out — I’m planning to give it a try just for fun, they are giving away free APPsec exam vouchers. It reminded me of another CTF platform that’s been around for a while now, ParrotCTF (parrotctf.com), which some of you might have already checked out. Has anyone else here tried either of these kinds of invite challenges lately? <!-- SC_ON --> submitted by /u/EfficientRepeat6679 (https://www.reddit.com/user/EfficientRepeat6679)
[link] (https://www.reddit.com/r/Pentesting/comments/1mnvkt7/curious_about_new_platform_hackcubes/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mnvkt7/curious_about_new_platform_hackcubes/)
https://www.reddit.com/r/Pentesting/comments/1mnvkt7/curious_about_new_platform_hackcubes/
<!-- SC_OFF -->I stumbled upon a new platform called HackCubes (hackcubes.com) that has an invite-style challenge, kind of like the one HackTheBox used to have back in the day. It’s still pretty new, so I’m curious to see how it turns out — I’m planning to give it a try just for fun, they are giving away free APPsec exam vouchers. It reminded me of another CTF platform that’s been around for a while now, ParrotCTF (parrotctf.com), which some of you might have already checked out. Has anyone else here tried either of these kinds of invite challenges lately? <!-- SC_ON --> submitted by /u/EfficientRepeat6679 (https://www.reddit.com/user/EfficientRepeat6679)
[link] (https://www.reddit.com/r/Pentesting/comments/1mnvkt7/curious_about_new_platform_hackcubes/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mnvkt7/curious_about_new_platform_hackcubes/)
A New Write-Up for a Vulnerability Sensitive Information Leakage via Referrer Header in Password…
الحمد لله رب العالمينContinue reading on Medium »
Read more...
الحمد لله رب العالمينContinue reading on Medium »
Read more...
Medium
A New Write-Up for a Vulnerability
Sensitive Information Leakage via Referrer Header in Password…
Sensitive Information Leakage via Referrer Header in Password…
الحمد لله رب العالمين
Day5 Recon: Hacking Hidden Endpoints: How to Use Burp Suite & OWASP ZAP for Web Spidering and…
Learn how to automate endpoint discovery using Burp and ZAP — two powerful tools for bug bounty hunting and pentesting.Continue reading on Medium »
Read more...
Learn how to automate endpoint discovery using Burp and ZAP — two powerful tools for bug bounty hunting and pentesting.Continue reading on Medium »
Read more...
Medium
Day5 Recon: Hacking Hidden Endpoints: How to Use Burp Suite & OWASP ZAP for Web Spidering and Crawling
Learn how to automate endpoint discovery using Burp and ZAP — two powerful tools for bug bounty hunting and pentesting.
How ExpressVPN Vulnerability Enables Silent Card Abuse — And Calls It “Expected Behavior”
Continue reading on Medium »
Read more...
Continue reading on Medium »
Read more...
Medium
How ExpressVPN Vulnerability Enables Silent Card Abuse — And Calls It “Expected Behavior”
Free story link
Bug Bounty + AI = This Prompt List Will Change Your Game
🧠 PROMPT CATEGORIESContinue reading on JavaScript in Plain English »
Read more...
🧠 PROMPT CATEGORIESContinue reading on JavaScript in Plain English »
Read more...
Medium
Bug Bounty + AI = 🔥 This Prompt List Will Change Your Game
🧠 PROMPT CATEGORIES
Prompt Engineering Toolkit (2025 Edition)
“JavaScript files don’t just power the frontend — they spill secrets, expose APIs, and open attack paths. You just need to ask the right…Continue reading on MeetCyber »
Read more...
“JavaScript files don’t just power the frontend — they spill secrets, expose APIs, and open attack paths. You just need to ask the right…Continue reading on MeetCyber »
Read more...
Medium
🚀 Prompt Engineering Toolkit (2025 Edition)
“JavaScript files don’t just power the frontend — they spill secrets, expose APIs, and open attack paths. You just need to ask the right…
7 Easy Bugs That Still Work in 2025
How to Find Low-Hanging Vulnerabilities: A Step-by-Step Guide for Bug Bounty HuntersContinue reading on System Weakness »
Read more...
How to Find Low-Hanging Vulnerabilities: A Step-by-Step Guide for Bug Bounty HuntersContinue reading on System Weakness »
Read more...
Medium
7 Easy Bugs That Still Work in 2025
How to Find Low-Hanging Vulnerabilities: A Step-by-Step Guide for Bug Bounty Hunters
Logs Don’t Lie: How a GraphQL Debug Endpoint Spilled the Entire Database ️
Hey there!😁Continue reading on InfoSec Write-ups »
Read more...
Hey there!😁Continue reading on InfoSec Write-ups »
Read more...
Medium
📜 Logs Don’t Lie: How a GraphQL Debug Endpoint Spilled the Entire Database 🗄️💥
Hey there!😁
A Deep Dive into Improper Authentication
Exploring How to Detect and Exploit Reusable OTP Issues, with a Case Study from HackerOne ReportContinue reading on InfoSec Write-ups »
Read more...
Exploring How to Detect and Exploit Reusable OTP Issues, with a Case Study from HackerOne ReportContinue reading on InfoSec Write-ups »
Read more...
Medium
A Deep Dive into Improper Authentication
Exploring How to Detect and Exploit Reusable OTP Issues, with a Case Study from HackerOne Report
A01: Broken Access Control and A05: Security Misconfiguration Leads to Unauthenticated Access to…
While using a service that I recently paid for, there was a slight hiccup in the service which was preventing me from using it. This…Continue reading on InfoSec Write-ups »
Read more...
While using a service that I recently paid for, there was a slight hiccup in the service which was preventing me from using it. This…Continue reading on InfoSec Write-ups »
Read more...
Medium
A01: Broken Access Control and A05: Security Misconfiguration Leads to Unauthenticated Access to Paid Content
While using a service that I recently paid for, there was a slight hiccup in the service which was preventing me from using it. This…
A Deep Dive into Improper Authentication
Exploring How to Detect and Exploit Reusable OTP Issues, with a Case Study from HackerOne ReportContinue reading on InfoSec Write-ups »
Read more...
Exploring How to Detect and Exploit Reusable OTP Issues, with a Case Study from HackerOne ReportContinue reading on InfoSec Write-ups »
Read more...
Medium
A Deep Dive into Improper Authentication
Exploring How to Detect and Exploit Reusable OTP Issues, with a Case Study from HackerOne Report
Logs Don’t Lie: How a GraphQL Debug Endpoint Spilled the Entire Database ️
Hey there!😁Continue reading on InfoSec Write-ups »
Read more...
Hey there!😁Continue reading on InfoSec Write-ups »
Read more...
Medium
📜 Logs Don’t Lie: How a GraphQL Debug Endpoint Spilled the Entire Database 🗄️💥
Hey there!😁
“Day 8: Mobile Hacking — How I Cracked a Banking App’s PIN in 10 Seconds ($5000 Bug)”
Two weeks ago, I reverse-engineered a “secure” banking app that claimed to use “military-grade encryption.” Turns out, they stored user…Continue reading on InfoSec Write-ups »
Read more...
Two weeks ago, I reverse-engineered a “secure” banking app that claimed to use “military-grade encryption.” Turns out, they stored user…Continue reading on InfoSec Write-ups »
Read more...
Medium
“Day 8: Mobile Hacking — How I Cracked a Banking App’s PIN in 10 Seconds ($5000 Bug)”
Two weeks ago, I reverse-engineered a “secure” banking app that claimed to use “military-grade encryption.” Turns out, they stored user…
Dorks For Sensitive Information Disclosure Part-3
Look google’s crawlers just got some juicy info……….Continue reading on Medium »
Read more...
Look google’s crawlers just got some juicy info……….Continue reading on Medium »
Read more...
Medium
Dorks For Sensitive Information Disclosure Part-3
Look google’s crawlers just got some juicy info……….
Certify 2.0 ... 🔥🔥🔥
https://www.reddit.com/r/redteamsec/comments/1mnp4fj/certify_20/
submitted by /u/SuperSaiyanSavSanta0 (https://www.reddit.com/user/SuperSaiyanSavSanta0)
[link] (https://specterops.io/blog/2025/08/11/certify-2-0/) [comments] (https://www.reddit.com/r/redteamsec/comments/1mnp4fj/certify_20/)
https://www.reddit.com/r/redteamsec/comments/1mnp4fj/certify_20/
submitted by /u/SuperSaiyanSavSanta0 (https://www.reddit.com/user/SuperSaiyanSavSanta0)
[link] (https://specterops.io/blog/2025/08/11/certify-2-0/) [comments] (https://www.reddit.com/r/redteamsec/comments/1mnp4fj/certify_20/)
Did you try this hackcubes challenge?
https://www.reddit.com/r/redteamsec/comments/1mo099d/did_you_try_this_hackcubes_challenge/
<!-- SC_OFF -->I stumbled upon a new platform called HackCubes (hackcubes.com) that has an invite-style challenge, kind of like the one HackTheBox used to have back in the day. It’s still pretty new, so I’m curious to see how it turns out — I’m planning to give it a try just for fun, they are giving away free APPsec exam vouchers. It reminded me of another CTF platform that’s been around for a while now, ParrotCTF (parrotctf.com), which some of you might have already checked out. Has anyone else here tried either of these kinds of invite challenges lately? <!-- SC_ON --> submitted by /u/EfficientRepeat6679 (https://www.reddit.com/user/EfficientRepeat6679)
[link] (http://hackcubes.com/) [comments] (https://www.reddit.com/r/redteamsec/comments/1mo099d/did_you_try_this_hackcubes_challenge/)
https://www.reddit.com/r/redteamsec/comments/1mo099d/did_you_try_this_hackcubes_challenge/
<!-- SC_OFF -->I stumbled upon a new platform called HackCubes (hackcubes.com) that has an invite-style challenge, kind of like the one HackTheBox used to have back in the day. It’s still pretty new, so I’m curious to see how it turns out — I’m planning to give it a try just for fun, they are giving away free APPsec exam vouchers. It reminded me of another CTF platform that’s been around for a while now, ParrotCTF (parrotctf.com), which some of you might have already checked out. Has anyone else here tried either of these kinds of invite challenges lately? <!-- SC_ON --> submitted by /u/EfficientRepeat6679 (https://www.reddit.com/user/EfficientRepeat6679)
[link] (http://hackcubes.com/) [comments] (https://www.reddit.com/r/redteamsec/comments/1mo099d/did_you_try_this_hackcubes_challenge/)
Rate Limiting in Web Applications: Bug That Pays Your Rent
Taming the flood before it drowns your system.Continue reading on Medium »
Read more...
Taming the flood before it drowns your system.Continue reading on Medium »
Read more...
Medium
Rate Limiting in Web Applications: Bug That Pays Your Rent
Taming the flood before it drowns your system.
A New Write-Up for a Vulnerability
Sensitive Information Leakage via Referrer Header in Password…
https://medium.com/@yousefezzeldin/a-new-write-up-for-a-vulnerability-sensitive-information-leakage-via-referrer-header-in-password-96ff2ef64b24?source=rss------bug_bounty-5
Sensitive Information Leakage via Referrer Header in Password…
https://medium.com/@yousefezzeldin/a-new-write-up-for-a-vulnerability-sensitive-information-leakage-via-referrer-header-in-password-96ff2ef64b24?source=rss------bug_bounty-5
الحمد لله رب العالمينContinue reading on Medium » (https://medium.com/@yousefezzeldin/a-new-write-up-for-a-vulnerability-sensitive-information-leakage-via-referrer-header-in-password-96ff2ef64b24?source=rss------bug_bounty-5)