This post is a supplement to my presentation at The Hack Summit 2023, where I will demonstrate how to accelerate and streamline web application penetration testing using several plugins for Burp Suite. Below is a compilation of the most useful plugins for Burp Suite that I personally use. Some of… Continue reading →
This manual shows you how to set up your IP camera. The model screenshots were taken from the IPCAM PTZ camera model C6F0SgZ3N0P6L2, however, the same settings can be applied to most brands. Cameras that will have very similar settings are Clearview, Dahua, Hikvision, Gise and Qsee. Format Video To… Continue reading →
I have been collecting statistics from my computer security research for the last few years. I decided to share them a bit. Here you can find a sample penetration test report – report. In a large number of interviews with penetration testers, I hear the question – "Has the security… Continue reading →
When you run a penetration test of a web page that generates dynamic content using templates with user-provided values, you may encounter server-side template injection vulnerability. Manual identification of the template engine you are dealing with and subsequent exploitation can be easily automated using the Tplmap tool. Tplmap is able… Continue reading →
Mapping web application resources can reveal important information about the tree and directory structure of your application, thereby revealing information about the software used, its version, or the programming language used in the construction. It consists in building a systematic view, which usually hierarchically shows what data the WEB application… Continue reading →
When you run a penetration test of a web application, you can generalize several steps. Each of them is characterized by the use of different tools and the same result obtained. It can also be noted that individual phases do not always occur closely after each other. Most often, however,… Continue reading →
According to statistics maintained by theOpen Web Application Security Project (OWASP), the ten most common security errors can be distinguished. The graphic below shows how often veracode, a web application security research organization, detects these vulnerabilities during a preliminary risk assessment. The vulnerability detection rate from the OWASP Top 10… Continue reading →
Penetration testing can be defined as a legitimate and authorized attempt to find andexploit security vulnerabilities in computer systems to improve the security of these systems. This process includes testing vulnerabilities as well as providing complete evidence of a so-called "vulnerability" attack. POC (proof of concept). This is to confirm… Continue reading →
Speed of information transmission plays an important role in the modern world. The development of technology has made it necessary to operate in a constant hurry, in fact, where "every minute is at a premium". An example of this phenomenon is brokerage houses, which build their headquarters as close as… Continue reading →
Cześć podróżniku!
Jestem Michał. Cyberbezpieczeństwo jest moją pasją i pracą. Hobbystycznie zajmuję się drukiem 3d. W ramach tej strony staram się dzielić się wiedzą właśnie z tych obszarów. Mam nadzieję, że znajdziesz tutaj przydatne dla siebie informacje :)
Więcej o mnie...
Subscription
Wspieraj tę stronę
Jeżeli podoba Ci się moja twórczość możesz mnie wesprzeć kawą :)
