WEBINAR
Learn how tech company HeyJobs achieves a comprehensive AppSec testing program on a tight budget.
WEBINAR
Learn how tech company HeyJobs achieves a comprehensive AppSec testing program on a tight budget.

Pentester Guides (10)

See all content

A Pentester’s Guide to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application...
Pentester Guides
Nov 13, 2020
Est Read Time: 4 min
Read more
A Pentester’s Guide to Cross-Site Scripting (XSS) cover image

A Pentester’s Guide to Cross-Site Scripting (XSS)

Examine a common security vulnerability, Cross-Site Scripting (XSS).
Pentester Guides
Oct 30, 2020
Est Read Time: 8 min
Read more

A Pentester’s Guide to HTTP Request Smuggling

What is HTTP Request Smuggling? HTTP request smuggling is an attack technique that is conducted by interfering with the...
Pentester Guides
Oct 15, 2020
Est Read Time: 9 min
Read more
A Pentester’s Guide to Server Side Request Forgery (SSRF) cover image

A Pentester’s Guide to Server Side Request Forgery (SSRF)

What is SSRF? In a Server-Side Request Forgery (SSRF) attack, the attacker can abuse functionality on the server to...
Cobalt Core Pentester Guides
Oct 1, 2020
Est Read Time: 4 min
Read more
A Pentester’s Guide to SQL Injection (SQLi) cover image

A Pentester’s Guide to SQL Injection (SQLi)

This blog will be one of many created alongside our Hacking How-To series, an educational video series around everyday...
Cobalt Core Pentester Guides
Sep 17, 2020
Est Read Time: 5 min
Read more

Pentest Workflow — Leveraging Community-Powered Tools

As a pentester, I like to look for ways to leverage automation so I can focus my efforts on bugs that are hard to...
Pentester Guides
Apr 14, 2020
Est Read Time: 3 min
Read more

Anatomy of Authentication Tests

Introduction Authentication, as OWASP states, is the process of verifying that an individual, entity, or website is who...
Pentester Guides
Mar 5, 2020
Est Read Time: 4 min
Read more
The Anatomy of Deserialization Attacks

The Anatomy of Deserialization Attacks

What is Deserialization? Serialization is the process of turning some object into a data format that can be restored...
Pentester Guides
Jan 23, 2020
Est Read Time: 7 min
Read more

Understanding the Anatomy of an Attack

Notable, high-impact security breaches sadly make regular headlines. You might be tempted to dismiss the latest as just...
Pentester Guides
Nov 21, 2019
Est Read Time: 9 min
Read more
    8 9 10 11 12