The Practical Web Pentest Associate (PWPA) Exam

The Practical Web Pentest Associate (PWPA) Exam

Overview The demand for skilled web application penetration testers is still ever-increasing and we are proud to introduce the Practical Web Pentest Associate (PWPA) certification. This certification is designed to validate the skills of aspiring web application...
A Beginner’s Guide to JSON

A Beginner’s Guide to JSON

Overview JSON permeates virtually every corner of the digital landscape today. It powers web APIs, configures files, fuels mobile apps, and anchors data storage. To maintain seamless day-to-day hacking, it’s crucial to wield a robust understanding of JSON....
BURP Suite Macros: A Hands-On Guide

BURP Suite Macros: A Hands-On Guide

Introduction Fed up being slowed down by simple checks and functionality? Even seemingly simple CSRF tokens can get in the way of a straight-forward brute-force attack! Enter BURP Suite Macros, an indispensable tool that can be used to efficiently handle these...
Get Started with NoSQL Injection (NoSQLi)

Get Started with NoSQL Injection (NoSQLi)

Overview NoSQL databases, a term that stands for “Not Only SQL,” represent a shift from traditional relational databases. Unlike their SQL-based counterparts that rely heavily on tables and fixed schemas, NoSQL databases provide flexible storage...
Docker for Web App Pentesters

Docker for Web App Pentesters

Overview Having a flexible and isolated environment doesn’t just save us time, it can also be crucial for testing. Whether you’re deploying a real-world application stack for research, testing exploits, or setting up vulnerable apps for practice, you need a...
Unearthing Secrets in Git Logs

Unearthing Secrets in Git Logs

Overview Version control systems, such as Git, are essential tools in software development, enabling seamless collaboration and change tracking. However, their widespread use can sometimes lead to unintended security oversights. While Git excels in managing code...