PentesterLabinPentesterLabDon’t Let Tools Spoil Your Hacking EducationIn the world of hacking, the right tools can make all the difference. However, when you’re just starting out, it’s crucial to understand…3 min read·May 29, 2024----
PentesterLabinPentesterLabBeating the code review plateauxIn every field, people eventually hit plateaux in their progression. Security code review is no different. In this article, we explore…2 min read·May 3, 2024--1--1
PentesterLabinPentesterLabInterview with Ryan Montgomery aka 0dayTell me a bit more about yourself?2 min read·Sep 1, 2023----
PentesterLabinPentesterLabExploring Algorithm Confusion Attacks on JWT: Exploiting ECDSAJSON Web Tokens (JWT) are widely used for authentication in modern applications. As their use increases, so does the importance of…3 min read·May 2, 2023--1--1
PentesterLabinPentesterLabA strategy to land your first pentest jobIn this blog post, we are going to cover a strategy to help you get a job as a pentester or application security professional.6 min read·Dec 16, 2021--2--2
PentesterLabinPentesterLabHow to start reviewing code?Too often (me included), savvy code reviewers recommend to get started into code review by “Just reading code” and that is indeed the best…4 min read·Oct 27, 2021----
PentesterLabinPentesterLabWho do you trust?I recently found a small issue in some TLS clients. More precisely, it is more of a difference between what happens and what I expect to…2 min read·Jun 3, 2020----
PentesterLabinPentesterLab/i considered harmfulAfter reading this blog post on a bug in Github and Unicode, I started playing more and more with Unicode (event bought two domains).2 min read·Mar 25, 2020----
PentesterLabinPentesterLabArticles worth-reading from 2019Every week, our twitter account @PentesterLab publishes a list of articles worth-reading. This is the list of all the articles for 2019…4 min read·Jan 2, 2020----