[Learning] Java Deserialization Vulnerabilities

 

[#2][Learning] OAuth Framework - Flow & Implementation

 

[#3][MobilePentesting] Insecure Data Storage on Android

[#2][MobilePentesting] Principle Of Mobile Security Testing

 

[#1][MobilePentesting] Mobile Device/Platform Security

[#1][Learning] OAuth Framework - Overview

 

[Working] What is my role and my business in company

[Learning] All about LFI - Local File Inclusion

[Training] OWASP Juice Shop walkthrough

[Learning] Flask Framework - Python [#2] - Overview

[Learning] Flask Framework - Python [#3] - Common Vulnerabilities

 

[Learning] Flask Framework - Python [#1] - Overview

 

[Training]

 

[Learning] Audio Forensics with Audacity

 

Hello, welcome to my personal blog. 😊

Today, I want to show you another useful tool for doing forensics, especially in audio forensics. It's about Audacity. Let's begin!

[Learning] Memory Forensics with Volatility

[Learning] Network Forensics with Scapy library in Python

 Hello guys ! Today , I will bring up something new, interesting and essential for you,beginners and anyone who want to expand their networking knowledge

I want to talk about scapy, a library made in Python, with its own CLI. Also, it is considered by many to be one of the most important package tool. Let's get started!

Usage/Functionalites:

+ Network scanning

+ packet exploitation: send, eavesdrop, analyze and fake impersonating network packets

Install:

[VulnHub] Loly walkthrough

 Hello, today I come back with VulnHub - which provides materials allowing anyone to gain practical hands-on experience with digital security, computer applications and network administration tasks .

I choose a random lab, named Loly. Let's get through it!

[picoCTF] Forensics picoGym challenge

 Hello buddy! Today I will introduce some new stuffs. 

I'm in self-training for CTF competition. And according to the need of my team, I decide to explore Forensics area. I hope this decision will make it work and I can absorb more and more knowledge for pentesting.

So, I will kick off with picoCTF, this place is better for every beginner . Let's start!

like1000: 250pts

[CSAW2020] Widthless web WRITE UP

 This competition is familiar to me. But this year, all the web challenges seem "guessy". Let's talk about this.

[Basic Python for Pentesting]#1 Create TCPclient and TCPserver SOCKET

 Hello guys ! 

With all my effort to learning about pentesting ,  I decide to learn Python in "pentester's way"

This is a powerful script language which can make everything easier and faster . 

Today, I will introduce about Socket and furthermore , create a TCP socket client and server , by Python . 

Firstly , what is socket ?