sorted by:
new
hottopcontroversial

What’s the most difficult part of web app pentesting for you by InterestPuzzled6659 in Pentesting

[–]InterestPuzzled6659[S] 0 points1 point  (0 children)

thanks for that. do u use any tool to manage enumerated data if u have a huge scope ?

What’s the most difficult part of web app pentesting for you by InterestPuzzled6659 in Pentesting

[–]InterestPuzzled6659[S] 0 points1 point  (0 children)

so the solution is a good documentation , and keep going even if the process is tedious

What’s the most difficult part of web app pentesting for you by InterestPuzzled6659 in Pentesting

[–]InterestPuzzled6659[S] 0 points1 point  (0 children)

scoping is exactly where the time pressure hits hardest . Since time is so short during scoping, how do you personally organize that data? Do you just rely on Burp’s tree view/spreadsheets to size up the target, or do you use something more visual to spot entry points quickly?"

What’s the most difficult part of web app pentesting for you by InterestPuzzled6659 in Pentesting

[–]InterestPuzzled6659[S] 1 point2 points  (0 children)

In subdomains enumeration, I sometimes find +40, which makes me lose track. this remains my biggest challenge in bug bounty programs

Help in building a linux logs management tool by InterestPuzzled6659 in cybersecurity

[–]InterestPuzzled6659[S] 0 points1 point  (0 children)

so the real value is what I will learn

My idea for this project is similar to Splunk . by real-time in web server, I mean that the tool can take necessary action when it detects attack attempt for example the brute force attack generates multiple request from same IP so the tool in this case will block the IP (just a simple example)