corpus.blog
41554 blogs · [ { "id": "01a07df4-830c-7187-8dca-bf033ea7dd2f", "title": "Learn Web Pentesting: Invariants and Feedback Loops", "url": "https://pentesterlab.com/blog/invariants-feedback-loops-web-pentesting", "published_at": "2025-01-28T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf033ecd565f", "title": "Minimal Changes Vulnerability Testing: Why Less is More in Security", "url": "https://pentesterlab.com/blog/minimal-changes-vulnerability-testing", "published_at": "2025-01-27T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf033f625e0d", "title": "Research Worth Reading Week 04/2025", "url": "https://pentesterlab.com/blog/research-worth-reading-week04-2025", "published_at": "2025-01-26T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf033fbefd14", "title": "OWASP Top 10: What It Is and How to Really Use It", "url": "https://pentesterlab.com/blog/owasp-top-10-for-appsec-pentesters", "published_at": "2025-01-21T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0340b57284", "title": "Research Worth Reading Week 03/2025", "url": "https://pentesterlab.com/blog/research-worth-reading-week03-2025", "published_at": "2025-01-19T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034118fdf2", "title": "How Homogenization of the Development Process Scales Application Security", "url": "https://pentesterlab.com/blog/homogenizing-development-for-scalable-appsec", "published_at": "2025-01-16T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03418d8878", "title": "Networking but not TCP/IP", "url": "https://pentesterlab.com/blog/infosec-networking-guide-beyond-tcp-ip", "published_at": "2025-01-11T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0341a6db71", "title": "The Role of Security Code Review Training for Developers", "url": "https://pentesterlab.com/blog/security-code-review-training-for-developers", "published_at": "2025-01-09T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03427c8ffa", "title": "Scoping a Security Code Review", "url": "https://pentesterlab.com/blog/scoping-security-code-review-guide", "published_at": "2025-01-06T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0342b54cf6", "title": "Research Worth Reading Week 01/2025", "url": "https://pentesterlab.com/blog/research-worth-reading-week01-2025", "published_at": "2025-01-05T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0342c97326", "title": "The \"Engineer Mind\": Visualizing Code and Architecture for Successful Pentesting and AppSec Engineering", "url": "https://pentesterlab.com/blog/engineer-mind-visualizing-code-and-architecture", "published_at": "2025-01-05T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0343c1f277", "title": "The \"Criminal Mind\" in Security Testing: Nature or Nurture?", "url": "https://pentesterlab.com/blog/criminal-mindset-in-security-testing", "published_at": "2025-01-03T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034417fc45", "title": "Password Reset Code Review and Pentest Checklist", "url": "https://pentesterlab.com/blog/password-reset-code-review-pentest-checklist", "published_at": "2025-01-02T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0344d6bf9f", "title": "What to Expect from a Security Internship", "url": "https://pentesterlab.com/blog/what-to-expect-security-internship", "published_at": "2025-01-01T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0345aa643c", "title": "How People Use PentesterLab: Beyond the Usual Training", "url": "https://pentesterlab.com/blog/creative-ways-to-use-pentesterlab", "published_at": "2024-12-25T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03466f1d8b", "title": "Research Worth Reading Week 51/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week51-2024", "published_at": "2024-12-23T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0347598bd7", "title": "Leveraging PentesterLab for Application Security Engineers", "url": "https://pentesterlab.com/blog/leveraging-pentesterlab-application-security-engineers", "published_at": "2024-12-23T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0347cbce1d", "title": "Another JWT Algorithm Confusion Vulnerability: CVE-2024-54150", "url": "https://pentesterlab.com/blog/another-jwt-algorithm-confusion-cve-2024-54150", "published_at": "2024-12-20T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0348088b51", "title": "New Year, New Hacker Me", "url": "https://pentesterlab.com/blog/level-up-your-hacker-journey-in-2025", "published_at": "2024-12-19T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03488431d0", "title": "PentesterLab Roadmap: Learn Bug Bounty Step-by-Step", "url": "https://pentesterlab.com/blog/leverage-pentesterlab-for-bug-bounty", "published_at": "2024-12-18T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0348cfed79", "title": "Research Worth Reading Week 50/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week50-2024", "published_at": "2024-12-16T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03493c4d94", "title": "Reading Between the Lines: A Guide to Thoughtful Learning in Security", "url": "https://pentesterlab.com/blog/reading-between-the-lines-security-learning", "published_at": "2024-12-12T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0349466835", "title": "How to Securely Design Your JWT Library", "url": "https://pentesterlab.com/blog/secure-jwt-library-design", "published_at": "2024-12-10T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034a412b1e", "title": "Research Worth Reading Week 49/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week49-2024", "published_at": "2024-12-08T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034a76a3c5", "title": "Exploring CORS Vulnerabilities in Rust: Patterns and Bypasses", "url": "https://pentesterlab.com/blog/rust-cors-vulnerabilities", "published_at": "2024-12-05T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034aee6809", "title": "CORS Vulnerabilities in Go: Vulnerable Patterns and Lessons", "url": "https://pentesterlab.com/blog/golang-cors-vulnerabilities", "published_at": "2024-12-02T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034b5e150e", "title": "Research Worth Reading Week 48/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week48-2024", "published_at": "2024-12-01T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034c23289d", "title": "Encoding Is Not Magic", "url": "https://pentesterlab.com/blog/encoding-is-not-magic", "published_at": "2024-12-01T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034cd9ca65", "title": "5 Essential Activities For Aspiring Web Hackers", "url": "https://pentesterlab.com/blog/essential-web-hacker-activities", "published_at": "2024-11-27T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034d0fa487", "title": "Hacking with Curl!", "url": "https://pentesterlab.com/blog/tricks-to-hack-with-curl", "published_at": "2024-11-25T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034d35cf1d", "title": "Research Worth Reading Week 47/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week47-2024", "published_at": "2024-11-24T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034e030d0a", "title": "How JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review", "url": "https://pentesterlab.com/blog/jwt-algorithm-confusion-code-review-lessons", "published_at": "2024-11-20T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034e9da196", "title": "Research Worth Reading Week 46/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week46-2024", "published_at": "2024-11-17T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034eda4fb8", "title": "How split() Can Prevent None Exploitation in JWT Validation", "url": "https://pentesterlab.com/blog/split-prevent-none-exploitation-jwt", "published_at": "2024-11-13T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034f53270a", "title": "Research Worth Reading Week 45/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week45-2024", "published_at": "2024-11-10T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf034f671a5a", "title": "Mitigating Risks of Command Execution in Compromised Directories", "url": "https://pentesterlab.com/blog/mitigating-risks-of-command-execution-in-compromised-directories", "published_at": "2024-11-07T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03503ca874", "title": "Research Worth Reading Week 44/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week44-2024", "published_at": "2024-11-03T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035101948c", "title": "Research Worth Reading Week 43/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week43-2024", "published_at": "2024-10-27T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0351ce0af7", "title": "The Diminishing Value of Secure Coding Training", "url": "https://pentesterlab.com/blog/diminishing-value-secure-coding-training", "published_at": "2024-10-24T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0352bf6a43", "title": "Research Worth Reading Week 42/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week42-2024", "published_at": "2024-10-21T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0352ecd323", "title": "Mastering Hacking Through Deliberate Practice", "url": "https://pentesterlab.com/blog/mastering-hacking-skills", "published_at": "2024-10-18T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03530cb4db", "title": "Research Worth Reading Week 41/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week41-2024", "published_at": "2024-10-15T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0354015384", "title": "The Value of Code Reviews Without Bugs", "url": "https://pentesterlab.com/blog/codereview-without-bugs", "published_at": "2024-10-10T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0354800b99", "title": "Research Worth Reading Week 40/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week40-2024", "published_at": "2024-10-07T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035556c9d2", "title": "Hiring Your First AppSec Engineer: The Technical Interview", "url": "https://pentesterlab.com/blog/technical-interview-for-your-first-appsec-engineer", "published_at": "2024-10-02T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03562d2690", "title": "Research Worth Reading Week 39/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week39-2024", "published_at": "2024-09-30T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03566b5d94", "title": "Hiring Your First AppSec Engineer", "url": "https://pentesterlab.com/blog/hiring-your-first-appsec-engineer", "published_at": "2024-09-25T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0356f60615", "title": "Research Worth Reading Week 38/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week38-2024", "published_at": "2024-09-24T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0357194b51", "title": "From CVE to Swarm: A Case Study on CVE-2024-32963", "url": "https://pentesterlab.com/blog/cve-to-swarm-case-study-cve-2024-32963", "published_at": "2024-09-20T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0357c46ab2", "title": "The Power of Wasting Time", "url": "https://pentesterlab.com/blog/wasting-time", "published_at": "2024-09-18T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035882ccca", "title": "Research Worth Reading Week 37/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week37-2024", "published_at": "2024-09-15T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0359090a80", "title": "OR 1=1 -- is Dying", "url": "https://pentesterlab.com/blog/or-1=1-is-dying", "published_at": "2024-09-13T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035986fb98", "title": "Clever Developers, Costly Mistakes", "url": "https://pentesterlab.com/blog/clever-developers", "published_at": "2024-09-10T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0359943f4a", "title": "Research Worth Reading Week 36/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week36-2024", "published_at": "2024-09-09T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035a35d149", "title": "Why Settle for a Bug When You Can Catch a Swarm?", "url": "https://pentesterlab.com/blog/code-review-catch-a-swarm-instead-of-a-bug", "published_at": "2024-09-02T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035a935448", "title": "Research Worth Reading Week 35/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week35-2024", "published_at": "2024-09-01T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035b3a2b20", "title": "The Certification Trap", "url": "https://pentesterlab.com/blog/the-certification-trap", "published_at": "2024-08-30T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035c24b0c0", "title": "Secure Coding Training Versus Security Code Review Training", "url": "https://pentesterlab.com/blog/secure-coding-vs-security-code-review", "published_at": "2024-08-29T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035ccce374", "title": "Research Worth Reading Week 34/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week34-2024", "published_at": "2024-08-25T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035d3c846e", "title": "Effective Note-Keeping for Web Security Code Reviews", "url": "https://pentesterlab.com/blog/effective-note-keeping-web-security-code-reviews", "published_at": "2024-08-20T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035dd29fc3", "title": "Research Worth Reading Week 33/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week33-2024", "published_at": "2024-08-18T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035df8ddc1", "title": "The Difference between Good and Bad Code Reviewers", "url": "https://pentesterlab.com/blog/difference-good-bad-code-reviewers", "published_at": "2024-08-15T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035e4bc53c", "title": "Spotting Discrepancies in Security Code Reviews", "url": "https://pentesterlab.com/blog/spotting-discrepancies-in-security-code-reviews", "published_at": "2024-08-12T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035eafb822", "title": "Research Worth Reading Week 32/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week32-2024", "published_at": "2024-08-11T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035f8581a9", "title": "Good Enough - A look at Golang http.ServeFile", "url": "https://pentesterlab.com/blog/good-enough-golang-http-ServeFile", "published_at": "2024-08-06T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf035ffe8667", "title": "Research Worth Reading Week 31/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week31-2024", "published_at": "2024-08-04T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03606d1f47", "title": "ORM Leak Exploitation Against SQLite", "url": "https://pentesterlab.com/blog/orm-leak-with-sqlite3", "published_at": "2024-07-30T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0360e1cdd2", "title": "Research Worth Reading Week 30/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week30-2024", "published_at": "2024-07-29T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03618e61f4", "title": "What makes a Language More Secure", "url": "https://pentesterlab.com/blog/what-makes-a-language-more-secure", "published_at": "2024-07-26T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0361fc5cde", "title": "Is PHP REALLY Getting Better?", "url": "https://pentesterlab.com/blog/php-security-is-improving", "published_at": "2024-07-23T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036227fff2", "title": "Research Worth Reading Week 29/2024", "url": "https://pentesterlab.com/blog/research-worth-reading-week29-2024", "published_at": "2024-07-22T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03622d55b2", "title": "The Journey from Pentesting to Security Code Review", "url": "https://pentesterlab.com/blog/pentesters-to-security-code-reviewers", "published_at": "2024-07-18T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0362dbe226", "title": "Research Worth Reading Week 28/2024", "url": "https://pentesterlab.com/blog/cyber-research-worth-reading-week28-2024", "published_at": "2024-07-15T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03632fd5c1", "title": "What Developers Get for Free", "url": "https://pentesterlab.com/blog/what-developers-get-for-free", "published_at": "2024-07-10T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03641aee4f", "title": "The Power of Scripting in Web Hacking", "url": "https://pentesterlab.com/blog/the-power-of-scripting-in-web-hacking", "published_at": "2024-07-03T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0364da78d3", "title": "6 Questions to Ask When Interviewing for an AppSec Role", "url": "https://pentesterlab.com/blog/6-questions-to-ask-when-interviewing-for-an-appsec-role", "published_at": "2024-06-14T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0365b7948b", "title": "Embrace the suck!", "url": "https://pentesterlab.com/blog/embrace-the-suck", "published_at": "2024-06-03T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03669edc9b", "title": "Don't Let Tools Spoil Your Hacking Education", "url": "https://pentesterlab.com/blog/dont-let-tools-spoil-your-hacking-education", "published_at": "2024-05-29T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0367190dcd", "title": "Beating the code review plateaux", "url": "https://pentesterlab.com/blog/beating-the-code-review-plateaux", "published_at": "2024-05-03T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0367e18218", "title": "Interview with Ryan Montgomery aka 0day", "url": "https://pentesterlab.com/blog/interview-with-ryan-montgomery-aka-0day", "published_at": "2023-09-01T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03682687c3", "title": "Algorithm Confusion Attacks against JWT using ECDSA", "url": "https://pentesterlab.com/blog/exploring-algorithm-confusion-attacks-on-jwt-exploiting-ecdsa", "published_at": "2023-08-03T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0368300c07", "title": "A strategy to land your first pentest job", "url": "https://pentesterlab.com/blog/a-strategy-to-land-your-first-pentest-job", "published_at": "2021-12-16T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0368c1909f", "title": "How to start reviewing code?", "url": "https://pentesterlab.com/blog/how-to-start-reviewing-code", "published_at": "2021-10-28T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0368fafc96", "title": "Who do you trust?", "url": "https://pentesterlab.com/blog/who-do-you-trust", "published_at": "2020-06-03T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0369e8a2d3", "title": "/i considered harmful", "url": "https://pentesterlab.com/blog/i-considered-harmful", "published_at": "2020-03-26T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036a4f4484", "title": "Articles worth-reading from 2019", "url": "https://pentesterlab.com/blog/articles-worth-reading-from-2019", "published_at": "2020-01-02T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036ac2abda", "title": "I don't need no proxy", "url": "https://pentesterlab.com/blog/i-dont-need-no-proxy", "published_at": "2019-12-30T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036bb86b23", "title": "Easy Capture-The-Flag Challenges", "url": "https://pentesterlab.com/blog/easy-capture-the-flag-challenges", "published_at": "2019-08-28T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036c847a4e", "title": "Invest in QA!", "url": "https://pentesterlab.com/blog/invest-in-qa", "published_at": "2019-08-16T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036d14445e", "title": "Building Blocks", "url": "https://pentesterlab.com/blog/building-blocks", "published_at": "2019-06-19T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036d36a6d8", "title": "CVE-2019–5418: on WAF bypass and caching", "url": "https://pentesterlab.com/blog/cve-2019-5418-on-waf-bypass-and-caching", "published_at": "2019-04-04T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036d9641ea", "title": "CVE-2019–5420 and defence-in-depth", "url": "https://pentesterlab.com/blog/cve-2019-5420-and-defence-in-depth", "published_at": "2019-03-19T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036e5b4dfa", "title": "Interview with a PRO user: Pamela O’Shea", "url": "https://pentesterlab.com/blog/interview-with-a-pro-user-pamela-oshea", "published_at": "2019-02-05T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036ebd4825", "title": "Should I go to university?", "url": "https://pentesterlab.com/blog/should-i-go-to-university", "published_at": "2018-12-26T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036eecb775", "title": "Interview with a PRO user — Borja Berastegui", "url": "https://pentesterlab.com/blog/interview-with-a-pro-user-borja-berastegui", "published_at": "2018-09-19T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036f50813a", "title": "Interview with a PRO user — Robert Kluger", "url": "https://pentesterlab.com/blog/interview-with-a-pro-user-robert-kluger", "published_at": "2018-07-26T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf036f75b5bb", "title": "Interview with a PRO user — WONG Wai Tuck", "url": "https://pentesterlab.com/blog/interview-with-a-pro-user-wong-wai-tuck", "published_at": "2018-07-09T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf03705ed8e5", "title": "NullCon HackIM 2018 web4 — The fast way?", "url": "https://pentesterlab.com/blog/nullcon-hackim-2018-web4-the-fast-way", "published_at": "2018-02-13T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf0370d0731a", "title": "10 common mistakes aspiring/new pentesters make", "url": "https://pentesterlab.com/blog/10-common-mistakes-aspiring-new-pentesters-make", "published_at": "2018-01-08T00:00:00+00:00" }, { "id": "01a07df4-830c-7187-8dca-bf037115692e", "title": "The Interview", "url": "https://pentesterlab.com/blog/the-interview", "published_at": "2017-07-22T00:00:00+00:00" } ] posts Claim your blog
Back to PentesterLab
Blog · corpus.blog/blogs/pentesterlab.com/posts

PentesterLab

pentesterlab.com

2025

Learn Web Pentesting: Invariants and Feedback Loopsoriginal ↗
28 Jan 2025
Minimal Changes Vulnerability Testing: Why Less is More in Securityoriginal ↗
27 Jan 2025
Research Worth Reading Week 04/2025original ↗
26 Jan 2025
OWASP Top 10: What It Is and How to Really Use Itoriginal ↗
21 Jan 2025
Research Worth Reading Week 03/2025original ↗
19 Jan 2025
How Homogenization of the Development Process Scales Application Securityoriginal ↗
16 Jan 2025
Networking but not TCP/IPoriginal ↗
11 Jan 2025
The Role of Security Code Review Training for Developersoriginal ↗
9 Jan 2025
Scoping a Security Code Revieworiginal ↗
6 Jan 2025
Research Worth Reading Week 01/2025original ↗
5 Jan 2025
The "Engineer Mind": Visualizing Code and Architecture for Successful Pentesting and AppSec Engineeringoriginal ↗
5 Jan 2025
The "Criminal Mind" in Security Testing: Nature or Nurture?original ↗
3 Jan 2025
Password Reset Code Review and Pentest Checklistoriginal ↗
2 Jan 2025
What to Expect from a Security Internshiporiginal ↗
1 Jan 2025

2024

How People Use PentesterLab: Beyond the Usual Trainingoriginal ↗
25 Dec 2024
Research Worth Reading Week 51/2024original ↗
23 Dec 2024
Leveraging PentesterLab for Application Security Engineersoriginal ↗
23 Dec 2024
Another JWT Algorithm Confusion Vulnerability: CVE-2024-54150original ↗
20 Dec 2024
New Year, New Hacker Meoriginal ↗
19 Dec 2024
PentesterLab Roadmap: Learn Bug Bounty Step-by-Steporiginal ↗
18 Dec 2024
Research Worth Reading Week 50/2024original ↗
16 Dec 2024
Reading Between the Lines: A Guide to Thoughtful Learning in Securityoriginal ↗
12 Dec 2024
How to Securely Design Your JWT Libraryoriginal ↗
10 Dec 2024
Research Worth Reading Week 49/2024original ↗
8 Dec 2024
Exploring CORS Vulnerabilities in Rust: Patterns and Bypassesoriginal ↗
5 Dec 2024
CORS Vulnerabilities in Go: Vulnerable Patterns and Lessonsoriginal ↗
2 Dec 2024
Research Worth Reading Week 48/2024original ↗
1 Dec 2024
Encoding Is Not Magicoriginal ↗
1 Dec 2024
5 Essential Activities For Aspiring Web Hackersoriginal ↗
27 Nov 2024
Hacking with Curl!original ↗
25 Nov 2024
Research Worth Reading Week 47/2024original ↗
24 Nov 2024
How JWT Libraries Block Algorithm Confusion: Key Lessons for Code Revieworiginal ↗
20 Nov 2024
Research Worth Reading Week 46/2024original ↗
17 Nov 2024
How split() Can Prevent None Exploitation in JWT Validationoriginal ↗
13 Nov 2024
Research Worth Reading Week 45/2024original ↗
10 Nov 2024
Mitigating Risks of Command Execution in Compromised Directoriesoriginal ↗
7 Nov 2024
Research Worth Reading Week 44/2024original ↗
3 Nov 2024
Research Worth Reading Week 43/2024original ↗
27 Oct 2024
The Diminishing Value of Secure Coding Trainingoriginal ↗
24 Oct 2024
Research Worth Reading Week 42/2024original ↗
21 Oct 2024
Mastering Hacking Through Deliberate Practiceoriginal ↗
18 Oct 2024
Research Worth Reading Week 41/2024original ↗
15 Oct 2024
The Value of Code Reviews Without Bugsoriginal ↗
10 Oct 2024
Research Worth Reading Week 40/2024original ↗
7 Oct 2024
Hiring Your First AppSec Engineer: The Technical Intervieworiginal ↗
2 Oct 2024
Research Worth Reading Week 39/2024original ↗
30 Sept 2024
Hiring Your First AppSec Engineeroriginal ↗
25 Sept 2024
Research Worth Reading Week 38/2024original ↗
24 Sept 2024
From CVE to Swarm: A Case Study on CVE-2024-32963original ↗
20 Sept 2024
The Power of Wasting Timeoriginal ↗
18 Sept 2024
Research Worth Reading Week 37/2024original ↗
15 Sept 2024
OR 1=1 -- is Dyingoriginal ↗
13 Sept 2024
Clever Developers, Costly Mistakesoriginal ↗
10 Sept 2024
Research Worth Reading Week 36/2024original ↗
9 Sept 2024
Why Settle for a Bug When You Can Catch a Swarm?original ↗
2 Sept 2024
Research Worth Reading Week 35/2024original ↗
1 Sept 2024
The Certification Traporiginal ↗
30 Aug 2024
Secure Coding Training Versus Security Code Review Trainingoriginal ↗
29 Aug 2024
Research Worth Reading Week 34/2024original ↗
25 Aug 2024
Effective Note-Keeping for Web Security Code Reviewsoriginal ↗
20 Aug 2024
Research Worth Reading Week 33/2024original ↗
18 Aug 2024
The Difference between Good and Bad Code Reviewersoriginal ↗
15 Aug 2024
Spotting Discrepancies in Security Code Reviewsoriginal ↗
12 Aug 2024
Research Worth Reading Week 32/2024original ↗
11 Aug 2024
Good Enough - A look at Golang http.ServeFileoriginal ↗
6 Aug 2024
Research Worth Reading Week 31/2024original ↗
4 Aug 2024
ORM Leak Exploitation Against SQLiteoriginal ↗
30 Jul 2024
Research Worth Reading Week 30/2024original ↗
29 Jul 2024
What makes a Language More Secureoriginal ↗
26 Jul 2024
Is PHP REALLY Getting Better?original ↗
23 Jul 2024
Research Worth Reading Week 29/2024original ↗
22 Jul 2024
The Journey from Pentesting to Security Code Revieworiginal ↗
18 Jul 2024
Research Worth Reading Week 28/2024original ↗
15 Jul 2024
What Developers Get for Freeoriginal ↗
10 Jul 2024
The Power of Scripting in Web Hackingoriginal ↗
3 Jul 2024
6 Questions to Ask When Interviewing for an AppSec Roleoriginal ↗
14 Jun 2024
Embrace the suck!original ↗
3 Jun 2024
Don't Let Tools Spoil Your Hacking Educationoriginal ↗
29 May 2024
Beating the code review plateauxoriginal ↗
3 May 2024

2023

Interview with Ryan Montgomery aka 0dayoriginal ↗
1 Sept 2023
Algorithm Confusion Attacks against JWT using ECDSAoriginal ↗
3 Aug 2023

2021

A strategy to land your first pentest joboriginal ↗
16 Dec 2021
How to start reviewing code?original ↗
28 Oct 2021

2020

Who do you trust?original ↗
3 Jun 2020
/i considered harmfuloriginal ↗
26 Mar 2020
Articles worth-reading from 2019original ↗
2 Jan 2020

2019

I don't need no proxyoriginal ↗
30 Dec 2019
Easy Capture-The-Flag Challengesoriginal ↗
28 Aug 2019
Invest in QA!original ↗
16 Aug 2019
Building Blocksoriginal ↗
19 Jun 2019
CVE-2019–5418: on WAF bypass and cachingoriginal ↗
4 Apr 2019
CVE-2019–5420 and defence-in-depthoriginal ↗
19 Mar 2019
Interview with a PRO user: Pamela O’Sheaoriginal ↗
5 Feb 2019

2018

Should I go to university?original ↗
26 Dec 2018
Interview with a PRO user — Borja Berasteguioriginal ↗
19 Sept 2018
Interview with a PRO user — Robert Klugeroriginal ↗
26 Jul 2018
Interview with a PRO user — WONG Wai Tuckoriginal ↗
9 Jul 2018
NullCon HackIM 2018 web4 — The fast way?original ↗
13 Feb 2018
10 common mistakes aspiring/new pentesters makeoriginal ↗
8 Jan 2018

2017

The Intervieworiginal ↗
22 Jul 2017
Previous Next