top of page
What is your methodology and approach when testing a web application which is using Wordpress?
Before moving forward with the approach to test a wordpress website, let’s discuss what is a wordpress. So, wordPress is a widely used,...
Nov 19, 20243 min read
3 views
What is the use of the Sequencer tab in Burpsuite?
Burp Sequencer is a sophisticated tool which is used to analyze the quality of randomness of data or tokens, specifically focusing on...
Nov 19, 20241 min read
5 views
What are the common metasploit commands?
Metasploit Framework is one of the most powerful and leading penetration-testing tool written in Ruby, and also one of the biggest...
Nov 19, 20243 min read
8 views
How to install and configure Burpsuite?
For download, visit this link and choose your Operating system: https://portswigger.net/burp/releases/professional-community-2022-8-1?req...
Nov 19, 20241 min read
4 views
What is SSL handshake (for dummies) and how does it help in security https?
The SSL handshake is the negotiation between the two parties or can say that the communication between the client (web browser) and the...
Nov 19, 20242 min read
1 view
Why Burpsuite is able to capture https traffic?
Burpsuite is an integrated, user-interface proxy tool which is used to perform security testing of web applications or websites. It is...
Nov 19, 20241 min read
22 views
Owasp Top 10 2017 vs 2021
The Open Web Application Security Project or OWASP is an international non-profit organization that produces freely available articles,...
Nov 19, 20242 min read
2 views
What are the different types of JSON web token attacks?
JSON Web Tokens (JWTs) are widely used for authentication and authorization in web applications. However, like any technology, they can...
Nov 19, 20243 min read
8 views
How to perform reconnaissance on a web application? Explain the methodology of tools you use to perform reconnaissance?
Reconnaissance is one of the most important steps in web application penetration testing as this step gives us a good idea about the...
Nov 19, 20243 min read
16 views
Approach towards testing a login page, reset password/verify email
Following test cases can be applied on the Login page: Bruteforce the login using cluster bomb attack. (both username / password) Use...
Nov 18, 20241 min read
2 views
bottom of page