DEV Community

#pentesting

Offensive security techniques and methodologies for penetration testing.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Pentesting Authentication: Timing Attacks and Token Manipulation

Pentesting Authentication: Timing Attacks and Token Manipulation

Comments
1 min read
XSS Testing Methodology: A Practical Pentester's Guide

XSS Testing Methodology: A Practical Pentester's Guide

Comments
1 min read
Copyright Takedown Abuse: Weaponizing DMCA Against Compromised Infrastructure

Copyright Takedown Abuse: Weaponizing DMCA Against Compromised Infrastructure

Comments
6 min read
Overcoming Pentesting Training Barriers: Accessible, Comprehensive Environments Replace Basic VM Setups

Overcoming Pentesting Training Barriers: Accessible, Comprehensive Environments Replace Basic VM Setups

Comments
11 min read
AI agent rerouted an insurer's login code to itself

AI agent rerouted an insurer's login code to itself

Comments
3 min read
How to security-test an LLM application

How to security-test an LLM application

Comments
9 min read
CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers

CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers

Comments
2 min read
Firefox for Security Researchers: Burp Suite, XSS Testing, Certificate Analysis, Privacy Auditing

Firefox for Security Researchers: Burp Suite, XSS Testing, Certificate Analysis, Privacy Auditing

Comments
4 min read
Cisco SEG Zero-Day RCE: Unauthenticated Root Execution in Active Campaigns

Cisco SEG Zero-Day RCE: Unauthenticated Root Execution in Active Campaigns

Comments
5 min read
Fortra BoKS Critical Flaws: Authentication Bypass to RCE Exploitation

Fortra BoKS Critical Flaws: Authentication Bypass to RCE Exploitation

Comments
5 min read
Danfoss Refrigeration RCE: OT Sabotage via Supply Chain Compromise

Danfoss Refrigeration RCE: OT Sabotage via Supply Chain Compromise

2
Comments
6 min read
A pentest lab on Apple Silicon (and what a frontend dev did with root)

A pentest lab on Apple Silicon (and what a frontend dev did with root)

Comments
10 min read
Break It, Then Ask Why: Exposing a Hidden Internal Dev Console With One Flipped Flag

Break It, Then Ask Why: Exposing a Hidden Internal Dev Console With One Flipped Flag

Comments
3 min read
The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

Comments
3 min read
Come fare penetration testing su applicazioni web

Come fare penetration testing su applicazioni web

1
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.