Don’t just learn tools and payloads. Learn why vulnerabilities exist. Hands-on web hacking, security code review, and real-world CVE labs.pentesterlab.com Melbourne, VictoriaJoined December 2011
Getting a CVE is easy when you're the one writing the vulnerabilities.
Just make sure you clarify what you mean by "responsible for 30 CVEs" on your resume... 😉
What do you wish someone had taught you before your first client pentest?
We've just released Pentest Process: 9 exercises covering scoping, client communication, reporting and retesting.
If you're mentoring a junior pentester, send them this:
pentesterlab.com/badges/pentest…
This is an image we keep using in our training, because you don't want to be the man at the bottom.
In our experience, most people stop at roughly the same point: when it gets hard, they've run out of ideas, and they feel like they’ve tried everything.
When you reach that point, go for a walk, take a break, or take a shower. Give yourself some time away from the problem, then come back and push a little further.
Revisit an assumption, investigate the behaviour you couldn't quite explain, or try the idea you dismissed earlier. Coming back with a fresh perspective can help you see something you missed after hours of staring at the same code or requests.
We've seen it again and again: some of the best bugs are discovered when you push a little further after you thought you were completely done.
Do you want to be able to write your own Java gadgets like the ones in ysoserial?
Make sure you check out our Java Deserialisation badge: pentesterlab.com/badges/java-de…
We just dropped two new labs!
There’s still enormous value in understanding how vulnerabilities actually work. That kind of knowledge never gets old. In fact, it’s probably becoming even more valuable.
Great work, @PentesterLab, on putting all of this knowledge together.
254K Followers 1K FollowingCofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
65 Followers 386 FollowingCasino Streaming Manager 🎥
Live Gaming Enthusiast 🎰
Bringing the Action to Your Screen
"Life is a game, and I'm here to stream it."