home

This is my idea about how one can become a web pentester.

I get this question a lot, how to get into pentesting. I think the shortest way to do that is through web pentesting and in this post I will explain why do I think that.

I recently discovered a fairly new man-in-the-middle tool called bettercap, which I will test in this video. I will explain the concept of ARP spoofing, install bettercap, and see how one can use it to sniff passwords on a network.

I have been working on an online Burp Suite training for quite some time. It is finally ready.

One advanced feature of sqlmap is the --eval parameter which allows the user to run python code before sending each attack request. That gives the user huge power. In this post this feature is introduced through some examples.