6 min read
Smile, You’re Hacked: Pentesting Open Cameras
Hey folks! Ever wondered how secure those surveillance cameras watching your every move really are?
pentest
12 articles filed under this topic.
3 min read
📜 RepoList - A tool to generate wordlists based on GitHub repositories
Hello everyone, I am back with another tool. This time it is a tool to generate wordlists based on GitHub repositories. I have named it Repolist
2 min read
Symfony: Disable the Symfony Profiler in Production
Hey there! If you're using Symfony, please disable the Symfony Profiler in production.
2 min read
Why You Should Disable Source Maps in Production
Sourcemap is a powerful tool for developers when debugging their JavaScript code. They provide a way to map the minified, production code back to the original, unminified source…
2 min read
Using Favicon Hashes to Spot Vulnerabilities
Have you ever heard of favicon? It's that little icon that appears in your browser tab when you visit a website.
2 min read
How I Built a Tool for Extracting Domains with Go Language
Hey there, today I want to talk about a tool that I recently created called domains. This tool is a CLI tool that allows you to extract domains from a list of URLs. This tool is…
3 min read
Authorization is crucial in securing websites
Hey there, today I want to talk about a serious vulnerability that many developers always forget to implement in their applications which is Authorization.
2 min read
The perils of wildcard CORS: How to protect your web application
When building a web application, it is important to consider the security implications of the "Access-Control-Allow-Origin" header.
1 min read
Subdomains and Security: How to Keep Your Development and Pre-Prod Environments Safe
As a business, it's important to have a strong online presence and use modern technologies to develop and test your apps.
1 min read
One-liner Bug Hunting: My Favorite Commands
In this post, I will be sharing some of my favorite one-liner commands that I use for bug hunting. These commands can be used to perform reconnaissance, identify open ports, check…
6 min read
Pentesting Tools I Use Everyday
I have been pentesting for a while now and I have used a lot of tools. There are some tools that I use everyday and I thought I would share them with you.
2 min read
Using Node.js to Parse a JSON File Generated from WPScan
WPScan is a popular tool for performing security assessments on WordPress websites. It generates a detailed report of any vulnerabilities it finds, including information about the…