Most of the penetration tests that I did so far, are Web Applications, since even if it is a thick client application, the functionality of it is heavily based on HTTP communication, using API calls or some times, even just having the mobile view of the website inside a WebView.
So today I loaded my website and while it was loading, I noticed that it wasn’t actually loading my starting page but it tried to redirect me to hellofromhony.com. Of course, it is visible that something was wrong, so using Burp Suite I tried to follow the order of the events in order to understand when the redirection happened.
Everyone who doesn’t live under a rock, knows and probably used Burp Suite, by PortSwigger. Recently a Beta 2.0 version was released with multiple new features and a new dashboard to control all the processing running, from one tab. In this post I will write about some features of Burp, that I found useful and I use almost daily to make my life easier.
My main device is a MacBook and the player I usually used was VLC. VLC is easy to use and it has been here for all these years, but it was time for a change. Recently I switched to mpv, that is flexible, customizable and open source.
Recently a friend of mine told me about Project Sonar by Rapid7. The purpose of this project is to enumerate as many as possible services online.
Every year more and more companies offer special deals for Black Friday and those offers could save you a few bucks. Bellow there is a list of IT offers that worth a look.
Aquatone is a great tool, developed by user @michenriksen, used for subdomain takeovers. The reason that I specifically like this tool is because it helps you enumerate subdomains easily, giving you IPs with Open Ports and their matching subdomain.
Recently I faced a situation that a website allowed the use of Server Side Includes. This was something new for me because I didn’t know many things about it and what payloads I could use. Luckily Read More »List of Server Side Include (SSI) Payloads
Updated: 09/23 – I needed Metasploit Framework for an msfvenom payload and I was using Kali Linux as a Virtual Machine, mainly because all the tools are pre-installed there. Running a
I like to change the appearance of my android device and a launcher is one of the most effective ways. This launcher is completely different from the rest. CLI launcher is black with white and green letters, no icons just text, just Read More »CLI launcher – The Linux terminal Launcher