Text Input Denials of Service Introduction Countless websites allow users to input characters in any number of locations. These can be usernames, passwords, about me sections, or in the case of today’s finding, a notetaking section in an inventory management system. These inputs are needed for effective usage and management of…

How you can do the same to improve your career outlook — Consider supporting my work on https://www.patreon.com/themayor I’m regularly asked by people how to break into penetration testing who are in the same position I was in not long ago. It was less than a year ago I was at my wit’s end. I thought I was unemployable in IT in…

Chapter Two — Socket Communications Part 1 In Lesson 1 we talked about how to configure a basic socket connection between two points and transfer data. In this lesson we will construct the foundations of the server and client, which will eventually be our payload. Prior to beginning, you will…

Introduction and Chapter One — Sockets Basics Introduction I remember struggling with slope formula in 10th grade geometry. Struggling with the concept, I asked the teacher if he could provide a real-life example of how to use slope formula so I could apply it in some way to help better understand…

Rack Attack What the heck is a Rack Attack? Rack Attack is a “middleware for blocking and throttling” in Ruby on Rails code (rack/rack-attack: Rack middleware for blocking & throttling (github.com). Rack attack allows a developer to set various rules in the configuration for allowing, blocking, and throttling requests. When it is used appropriately, Rack Attack can…

Unverified Password Change Introduction In today’s article we’ll talk about a super easy to find vulnerability covered under CWE-620 — Unverified Password Change. At the end of the article, we’ll go through the Huntr.dev submission process and what to expect from submission to validation and beyond using one of my previously…

Finding Projects Introduction Bug hunting, in the eyes of companies like HackerOne and Bugcrowd, is all about impact. It’s been beaten into people’s heads that low-hanging fruit issues aren’t accepted or aren’t worth your time. While many of these issues are absolutely security risks and best practices, the platforms will tell…

Better work on your soft skills first — Consider supporting my work at https://ko-fi.com/themayor. As a mentor and educator in the offensive cybersecurity arena, I’m regularly asked the same basic questions — What’s the fastest way for me to break in? What certifications should I get? Do I need a college degree? Should I trade a kidney for…

eLearnSecurity Certified Penetration Tester eXtreme Introduction I recently decided to take the eLearnSecurity Certified Penetration Tester eXtreme (eCPTX) exam. I have been feeling confident with pentesting active directory environments and felt I would be able to give it a shot. Here are my thoughts. Advanced Penetration Testing — Course The eCPTX exam is based…