The OWASP Top 10 is a widely recognized list of the most critical security risks for web applications. It is updated every few years based on data analysis and community feedback. The latest version, released in 2021, introduces some new categories and changes some existing ones to reflect the current threat landscape. As developers, we…
Continue reading →
Web services are applications that run on the internet and provide functionality to other applications or users. They can be complex and require a lot of configuration and maintenance. Ansible is a tool that helps us automate the deployment and management of web services. It allows us to write simple and declarative scripts that describe…
Continue reading →
Welcome to the first installment of our restarted blog series, where we dive into the fascinating world of penetration testing. Today we focus on the OWASP Juice Shop application. In this series, we will explore various vulnerabilities within the Juice Shop and demonstrate how to exploit them to enhance your security testing skills. Today, we…
Continue reading →
RootMe is a bite sized WEB upload form and Linux privilege escalation exercise.
Continue reading →
With Burp Suite we can initiate dictionary attacks against a website. This time in this simulated attack we will brute force the login field of the Juice Shop web application. We already know the email address of an admin user, so we have to make sure to find the right password. Important note: hacking in the…
Continue reading →
The OWASP Top 10 is a standard awareness document that lists the most common weaknesses of modern web applications. Burp Suite will help our application security testing along the Developer Mode of the browser. We will break in to the OWASP Juice Shop, the most modern and sophisticated insecure web shop. Important note: hacking in…
Continue reading →