AEM Hacker - Approaching Adobe Experience Manager Webapps in Bug Bounty Programs
Explore techniques for hacking Adobe Experience Manager webapps, including misconfigurations, vulnerabilities, and automation tools. Learn methodologies for bug bounty programs targeting AEM deployments.
Speed Bumps and Speed Hacks - Adventures in Car Manufacturing Security
Dive into critical security vulnerabilities affecting major car manufacturers' web applications, exploring real-world attacks, impact chains, and the importance of responsible disclosure policies.
Breaching AWS Through Shadow Resources - Critical Vulnerabilities and Security Implications
Uncover critical AWS vulnerabilities and security insights through real-world examples of shadow resource exploitation, featuring detection methods, privilege escalation techniques, and best practices for cloud security.
The Art of Compromising Command and Control Servers - A Web Application Vulnerabilities Perspective
Dive into techniques for exploiting command and control server vulnerabilities, uncovering infrastructure weaknesses, and exposing threat actors through common web application security flaws.
Python3 for Pentesting - Developing an Nmap Scanner
Develop an Nmap scanner using Python3 for network reconnaissance and vulnerability assessment. Learn to automate scanning tasks and interpret results for enhanced cybersecurity skills.
Sexy Mobile App Attacks by Example - 2019
Comprehensive review of security flaws in Android and iOS apps, covering anonymized findings, vulnerabilities in open-source apps, and issues in government-mandated applications. Practical insights for mobile security enthusiasts.
The FaaS and the Curious - Exploring AWS Lambda Security in 2018
Explore AWS Lambda's attack surface, including function hijacking, cloud environment access, and runtime reverse engineering. Learn about FaaS security risks and potential exploits.
Poking Holes in the Cloud: Auditing AWS Security - 2018
Explore tools and techniques for penetration testing AWS-hosted systems, covering reconnaissance, exploitation, and key insights for enhancing cloud security.
Python3 for Pentesting - Developing a TCP Server and Understanding Sockets
Develop a TCP server and understand network sockets in Python3 for penetration testing. Learn to create custom scripts for ethical hacking and cybersecurity applications.
Web App Pentesting - HTTP Cookies and Sessions
Explore HTTP cookies and session IDs in web app security, learning their purposes and potential vulnerabilities for more effective penetration testing.
Web App Pentesting - HTTP Headers and Methods
Explore HTTP headers, methods, and potential vulnerabilities in web applications. Learn how to identify and exploit security weaknesses, focusing on the PUT method abuse.
Web App Penetration Testing - Introduction to HTTP
Comprehensive introduction to HTTP protocol, requests, responses, methods, and headers for web app penetration testing. Gain essential knowledge for effective security assessments.
Fuzzing & Directory Brute-Force With ffuf
Learn to perform fuzzing, enumeration, and directory brute-forcing using ffuf, a fast web fuzzer. Discover techniques for directory discovery, virtual host detection, and parameter fuzzing to enhance your web security testing skills.
Finding and Exploiting Novel Flaws in Java Software
Explore techniques for discovering and exploiting vulnerabilities in Java applications, focusing on novel flaws and advanced security research methodologies.
Cloud Hacking - Hacking Amazon AWS
Explore techniques for hacking Amazon AWS, focusing on offensive security and red team strategies. Learn about potential vulnerabilities and ethical hacking approaches in cloud environments.
How to Use ZAP and ZAP HUD for Web Application Testing - LevelUp 0x04
Learn to use ZAP for web app testing and explore its new Heads Up Display feature, bringing powerful functionality directly into your browser for enhanced security analysis.
The Diary of an Inexperienced Bug Hunter - Introduction to Android Hacking
Explore Android app security, bug bounty programs, and essential tools for mobile penetration testing. Learn structure analysis and gain practical insights for successful Android hacking.
Turbo Intruder: Abusing HTTP Misfeatures to Accelerate Web Application Attacks
Explore advanced HTTP exploitation techniques using Turbo Intruder, a high-speed Burp extension for automated web application attacks, with insights on payload generation and response analysis.
Finding Sensitive Data in Android Apps - LevelUpX Series 12
Explore techniques for accessing and extracting sensitive data from Android apps' internal storage, with tools and strategies for impactful bug bounty reports.
GraphQL CTF and XSS Challenge Walkthrough - Hacker101 and Bug Bounty Notes
Explore GraphQL CTF challenges and XSS vulnerabilities in this hands-on session. Learn practical hacking techniques and improve your bug bounty hunting skills.
Cloud Hacking- The Basics
Explore fundamental techniques for identifying and exploiting vulnerabilities in cloud infrastructure, enhancing your offensive security skills and understanding of cloud security risks.