What is it IDOR: Insecure Direct Object Reference These types of vulnerabilities arise from acces control issues. We will devote another entire chapter to those types of vulnerabilities. The term IDOR was made popular in by appearing in the OWASP top 10 but in reality it’s simply another type of Broken Access Control…

In the second part of our mini-series, we are going to look at the types of XSS and what we can do to evade those pesky filters! In the last part, we are diving deeper into exploiting these filter evasions in different contexts. Stored vs Reflected Stored and reflected XSS are two types…

Introduction I think XSS is a wonderful type of exploit, we can do many things with it but exploiting it is not always easy. A lot of vulnerabilities are still missed every day because the wrong attack vector was used. In this article, I want to present you with a path…

Password reset link not expiring After a user has used a password reset token, that token should be burned and should not be used for that account again. The problem is that sometimes developers forget to invalidate these tokens. This would allow several attack avenues such as the attacked being able to generate an…

Introduction The pentesting report is arguably one of the most important documents that come from a pentest. Do not be afraid to spend a significant amount of time to make this document shine and make sure that you use templates. Make your own template based on those you can find…

Intro Through my time pentesting and working with other people, I have picked up a few valuable lessons that I hope to imprint on your brain. Today’s lesson is all about where your priorities should lay and how you should order your work. This can be a very difficult task to…

00x?? Test plan — Example — hackxpert.com/pentest 0. Document revision history Version Revisor Date 1. Goal of the document [Write down what you are trying to achieve with this document] In this document we will describe the testing strategy including but not limited to: The features to be tested The methodology The roles and responsibilities The entry and exit criteria for testing 2. Who is this document for

What is a pen test? Are we testing fountain pens? ball pens? This joke is as old as pen testing itself yet it remains funny. Of course, pen testing is a collection of actions with a specific goal in mind but what that goal is can differ from test to test and the actions as…

Introduction When testing with a MiTM proxy such as Burp Suite or OWASP ZAP, we have to option to add a proxy or edit it. This is very useful if you want to change your proxies port number or interface (network card). We can add more than one proxy, however, have…