Welcome back, my aspiring cyber warriors! In this series on Web App Hacking, we continue to explore ways to hack web applications (apps). In this tutorial, we will explore Cross Site Request Forgeries or CSRF. CSRF is an attack where…
Welcome back, my aspiring Cyber Warriors! In this series–Web App Hacking–we are exploring the many ways that an attacker can compromise Web Applications. In this tutorial, we will explore using Local File Inclusion or LFI. Many scripting languages used in…
Welcome back, my aspiring hackers! As I often say, reconnaissance is a crucial part of hacking. You must carefully and thoroughly gather information on the target before attacking, otherwise you are usually wasting your time and risking detection. There are…
Welcome back, my novice hackers! In this series on Web App Hacking, we are examining multiple ways to hack web sites and web applications. In this particular tutorial we will examine directory or path traversal. In this type of attack,…
Welcome back, my nascent hackers! Often when attempting to hack a web site, it might be useful to make a copy and work with it off-line. While working online, often our actions will be detected by security devices such as…
WordPress is the world’s most widely used Content Management System (CMS) for websites, comprising almost 28% of all sites on the Internet. This means that tens of millions of websites use this CMS and the vulnerabilities we find there can…
Welcome back my rookie Web App Hackers! Often, you will have the opportunity to upload a file to website such a Word Doc, a PDF or a picture such as a .jpg or .png. You have probably uploaded pictures to…
Web Applications (apps) provide so much opportunity for mischief by hackers. They can be defaced and compromised and probably most importantly, they can provide an entre’ point to the corporation’s internal network and resources (most importantly, the database). This series…
In previous tutorials, we have touched on some of the techniques and tools for web app hacking. We looked at web app vulnerability testing, website cloning, web app footprinting, web app password cracking, and many others. In this series, we…
Welcome back, my newbie hackers! In previous articles this section, I showed you how to find WordPress sites and how to identify the vulnerabilities in these sites (WordPress comprises nearly 30% of all websites). In this tutorial, we will use…
over 56 hours of video content, 10 expert lead courses, and 3 books.
$149
Master OTW put together a powerhouse bundle with everything you need to start hacking
You’re not going to find a more loaded starter kit
