This machine has a webs server that has unauthenticated access with an IDOR (Insecure Direct Object Reference) vulnerability. By changing the number at the end of the URL, you can find a PCAP file with cleartext FTP traffic containing credentials. These credentials work for ssh and can be used to Read more
In the world of cybersecurity, penetration testers are constantly probing and testing networks to identify vulnerabilities before they can be exploited maliciously. Among the plethora of tools at their disposal, EyeWitness emerges as a powerful ally, enabling testers to visualize the interfaces of web servers, making it easier to identify Read more
SSL Certificates to TLS Certificates SSL (Secure Sockets Layer) certificates, now more commonly referred to as TLS (Transport Layer Security) certificates, are digital certificates that facilitate secure, encrypted communication over the internet. They play a vital role in protecting sensitive data during transmission, such as login credentials, personal information, and Read more
The curl command is a versatile and powerful tool that allows users to transfer data to and from a server using various network protocols such as HTTP, HTTPS, FTP, and more. It is widely used by developers, system administrators, and even casual users for tasks ranging from testing APIs to Read more
eb requests are the backbone of the internet. Whether you’re browsing a website or making an API call, every interaction with a web application involves sending and receiving web requests. In this post, we will explore the basics of how web requests work. What is a web request? A web Read more
DOM-based cross-site scripting (XSS) is a type of web vulnerability that allows an attacker to inject malicious code into a web page. The code is then executed by the browser, allowing the attacker to steal sensitive information, modify the content of the page, or redirect the user to a malicious Read more
“Burp Suite is a framework of web application pentesting tools, it is widely regarded as the de facto tool to use when performing web app testing.” Source: https://tryhackme.com/room/rpburpsuite I am using the “Burp Suite” room from TryHackme to build this resource. Burp Suite is pre-installed on Kali Linux, if you’ll Read more