PentesterLab @PentesterLab Twitter profile

Pinned Tweet

PentesterLab

@PentesterLab

1 year

A quick tour of our new Enterprise features!

6

9

105

Last Seen Profiles

@MithuRheum

@DutchNewsNL

@ESWCgg_ar

@Sushilberiwal

@CornellElectrix

@BXSFox

@IPAsansalcool

@ayashalkar

@SwitchConsole

@oldmudgie

@Nico_deer

@monkichiyuttari

@CaffNew

@AlexHbcu

@dvorstone

@THE_DC_DOG

@Bill42X

@danjamouse1

@danthelovelife

@BassinesNon

@sydn3y77

@AlgerianFooty

@annytf

@iZkittle

@timhorgan

@pattymanterola

@nako_yabuki_75

@CubScoutsIE

@BillaVGC

@RCHSFootball1

@yuyu197100

@elliebelladona

@GwladysDev

@777eeiu

@JoverCristina

@NateBerkus

PentesterLab

@PentesterLab

3 years

Our Black Friday Special is now live: One-year: US$146.52 instead of US$199.99 Student (3-month): US$27.99 instead of US$34.99 Happy Hacking!

PentesterLab: GO PRO AND GET TO THE NEXT LEVEL!

We've been teaching web security for years and have put together many well thought-out exercises to get you from zero to hero. Our exercises cover everything from really basic bugs to advanced...

pentesterlab.com

30

197

8K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet !! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet !!

182

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

165

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

185

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

145

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! To celebrate 80k followers! We are going to give a 1-month voucher to **80** people who RT this tweet (picked randomly)! We are going to send our socks, t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet (picked randomly)!!

182

2K

PentesterLab

@PentesterLab

2 years

Thanks everyone for your support! Let's do it now! We will give away 140 x 1-month subscription. To enter you just need to interact with this tweet (like/RT/...)!

PentesterLab

@PentesterLab

2 years

We were planning 70 x 1-month voucher for our 70k followers. We are going to double it (140 x 1-month) if we reach 70k followers before the end of Def Con!

128

326

1K

378

947

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

168

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

162

981

2K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

110

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

148

1K

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

176

1K

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

117

1K

2K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

131

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! To celebrate 60k followers! We are going to send our new socks and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-month voucher to **60** people who RT this tweet!

165

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

135

945

2K

PentesterLab

@PentesterLab

2 years

🍾🪩🪅🎉🥳Giveaway time! 🥳🎉🪅🪩🍾 We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

118

872

2K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

118

900

2K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

100

949

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! To celebrate 50k followers! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-month voucher to **50** people who RT this tweet!

133

936

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

121

953

1K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

98

883

1K

PentesterLab

@PentesterLab

1 year

10 more sleeps before our BLACK FRIDAY SPECIAL! Let's do a Giveaway in the meantime! We are going to: * Send a swag pack to one person who follows @PentesterLab and RT this tweet!! * Give 12-month voucher to someone who follows @PentesterLab and ♥️ this tweet!!

138

887

1K

PentesterLab

@PentesterLab

2 years

Ok, let's try to do a swag giveaway. We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !!

109

117

1K

PentesterLab

@PentesterLab

1 year

Black Friday Giveaway! Make sure you check our deals: We are going to send a t-shirt and a few goodies to one person who retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

PentesterLab: GO PRO AND GET TO THE NEXT LEVEL!

We've been teaching web security for years and have put together many well thought-out exercises to get you from zero to hero. Our exercises cover everything from really basic bugs to advanced...

pentesterlab.com

111

869

1K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

75

829

1K

PentesterLab

@PentesterLab

2 years

Time for another swag giveaway! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !!

117

121

1K

PentesterLab

@PentesterLab

2 years

Another giveaway! We are going to send a t-shirt and a few goodies (including socks) to one person who follows @PentesterLab and retweets this tweet !! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet !!

133

869

1K

PentesterLab

@PentesterLab

2 years

Time for another swag giveaway! You know the drill: We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !!

114

109

1K

PentesterLab

@PentesterLab

3 months

Every Single Time...

14

181

1K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

77

753

1K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

95

835

1K

PentesterLab

@PentesterLab

1 year

Another Black Friday Giveaway! Make sure you check our deals: We are going to send a t-shirt and a few goodies to one person who retweets this tweet!! And we are going to give a 12-month voucher to someone who likes this tweet!!

PentesterLab: GO PRO AND GET TO THE NEXT LEVEL!

We've been teaching web security for years and have put together many well thought-out exercises to get you from zero to hero. Our exercises cover everything from really basic bugs to advanced...

pentesterlab.com

89

749

1K

PentesterLab

@PentesterLab

1 year

Final Giveaway! This time for #Cyber Monday Make sure you check our deals: We are going to send a t-shirt and a few goodies to one person who retweets this tweet!! And we are going to give a 12-month voucher to someone who likes this tweet!!

PentesterLab: GO PRO AND GET TO THE NEXT LEVEL!

We've been teaching web security for years and have put together many well thought-out exercises to get you from zero to hero. Our exercises cover everything from really basic bugs to advanced...

pentesterlab.com

58

663

1K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

102

739

1K

PentesterLab

@PentesterLab

2 years

We were planning 70 x 1-month voucher for our 70k followers. We are going to double it (140 x 1-month) if we reach 70k followers before the end of Def Con!

128

326

1K

PentesterLab

@PentesterLab

1 year

🎉🥳🎉 We just reached 110K followers! 🎉🥳🎉 🎉🥳🎉🥳Let's celebrate! 🎉🥳🎉🥳 We are going to give a 1-month voucher to 110 people who RT this tweet and follow @PentesterLab (picked randomly)!

109

917

855

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

78

551

840

PentesterLab

@PentesterLab

5 years

Want to bypass WAF when exploiting CVE-2019-5418 ? curl -H 'Accept: ../../../../../../e*c/p*s*d{{' http://server/...

14

276

828

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

66

515

836

PentesterLab

@PentesterLab

1 year

Two more days before our Black Friday specials! And we just reached 90K followers! Let's celebrate! We are going to give a 1-month voucher to 90 people who RT this tweet and follow @PentesterLab (picked randomly)!

105

985

800

PentesterLab

@PentesterLab

3 years

Not going to show off but some of our labs cover how to access the source code of an HTML page.

26

70

760

PentesterLab

@PentesterLab

10 months

To celebrate our new channel ! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

AppSecSchool

Hi, welcome to our new youtube channel named AppSecSchool. Our goal with this channel is to cover the less technical aspects of Application Security, especially for people working or wanting to work...

www.youtube.com

66

441

713

PentesterLab

@PentesterLab

1 year

We put together a small XSS challenge: http://157.230.239.59:1234/ The goal is to get an alert box using a script tag.

46

75

462

PentesterLab

@PentesterLab

2 years

Two new wallpapers are now available! Dark mode vs light mode...

19

49

415

PentesterLab

@PentesterLab

1 month

🚨🚨🚨 Too many people miss critical vulnerabilities because they assume a GET request can't have a body! 🚨🚨🚨 This is how you can send such a request using #curl : $ curl '0.0.0.0:1234/download?filename=TEST' --data 'filename=../../../../../../../etc/passwd' -X GET

5

83

431

PentesterLab

@PentesterLab

4 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ 🗞️ 🗞️

hipotermia - HTTP Request Smuggling + IDOR

A bug chain of HTTP Request Smuggling and an IDOR which allows to retrieve user sensitive data

hipotermia.pw

1

163

389

PentesterLab

@PentesterLab

6 years

We just released our JSON Web tokens cheatsheet:

2

174

382

PentesterLab

@PentesterLab

2 years

And we just released our latest challenge: Log4j Remote Code Execution:

PentesterLab: Log4j RCE

This challenge covers the latest RCE in Log4j

pentesterlab.com

5

96

385

PentesterLab

@PentesterLab

3 years

You pop a shell, what is the first command you run?

243

29

377

PentesterLab

@PentesterLab

30 days

We would like to welcome our new team member: Jia Tan! Jia will work on a set of challenges for our "Supply Chain" badge!!

16

41

366

PentesterLab

@PentesterLab

3 months

8

46

320

PentesterLab

@PentesterLab

4 years

Just in case someone wonders: bcrypt.

18

26

295

PentesterLab

@PentesterLab

5 years

Good articles discovered last week: 🗞️ 🗞️ 🗞️

Account Takeover Using Cross-Site WebSocket Hijacking (CSWH)

Hello ,

sharan-panegav.medium.com

2

113

286

PentesterLab

@PentesterLab

4 years

Our latest exercise on PDF SSRF based on the excellent talk from @daeken and @NahamSec at DefCon 2019 is now available:

PentesterLab: SSRF in PDF generation

This exercise covers how you can read arbitrary files when an application generates pdf from a link you provide

pentesterlab.com

2

68

259

PentesterLab

@PentesterLab

3 years

How it started. How it is going.

5

14

258

PentesterLab

@PentesterLab

2 years

हमने अभी 13 घंटे के वीडियो के लिए हिंदी में सबटाइटल जारी किए हैं! 12 महीने का वाउचर जीतने का मौका पाने के लिए रीट्वीट करें

50

231

252

PentesterLab

@PentesterLab

4 years

We are partnering with @Bugcrowd to help researchers find more and better bugs: !!! P1📈 P5📉

Bugcrowd + PentesterLab — Learn Web Hacking Easier! | @Bugcrowd

As we open a new year, Bugcrowd is continuing to drive toward its goal of continued investment in the development of its researchers. We are overwhelmingly proud to announce that we’re partnering...

www.bugcrowd.com

6

63

247

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️

Write up of two HTTP Requests Smuggling

This article about how I found two sites for HTTP Request Smuugling

medium.com

1

88

234

PentesterLab

@PentesterLab

2 years

🎉🎉 50k followers!! 🎉🎉 🎉🎉 Thanks everyone for your support!🎉🎉

23

12

237

PentesterLab

@PentesterLab

4 years

How it started: How it’s going:

2

13

223

PentesterLab

@PentesterLab

3 years

PentesterLab PRO is 5 years old...

24

4

224

PentesterLab

@PentesterLab

1 month

Five activities every web hacker should do at least once: 1. Read the source code of an HTTP request parser 2. Write a small web application with registration, authentication, file upload... 3. Read an RFC 4. Participate in a Capture The Flag competition. 5. Fix a…

1

54

224

PentesterLab

@PentesterLab

4 years

And our Black Friday Sale is Live: 2*13.37% off on the one year subscription!

10

65

221

PentesterLab

@PentesterLab

4 months

Stop reading dozens of hacking/security books. Focus on taking action: ‣ Hands-on learning ‣ Hack on real applications/networks (open source projects, bug bounty...) ‣ Read write-ups (CTF, bug bounty, vulnerability research...) ‣ Meet like-minded people (twitter, discord,…

3

39

191

PentesterLab

@PentesterLab

1 year

🗞 🗞 🗞 🗞 🗞 🗞 🗞 🗞 🗞 #PentesterLabWeekly

Probing the Server-Side: Detecting and Exploiting Prototype Pollution | YesWeHack Learning Bug...

Dive into the realm of server-side prototype pollution with our comprehensive guide. Learn how to detect and exploit this intriguing vulnerability, enhancing your bug bounty hunting and ethical...

www.yeswehack.com

2

68

216

PentesterLab

@PentesterLab

4 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ 🗞️

Bypass SameSite Cookies Default to Lax and get CSRF

SameSite=Lax Cookies by Default is a new browser feature we will look at how to bypass it and what is the security concerns with it..

medium.com

2

93

211

PentesterLab

@PentesterLab

1 year

Articles worth reading discovered last week: 🗞 🗞 🗞 🗞 🗞 🗞 🗞 🗞 #PentesterLabWeek

ESI Injection Part 2: Abusing specific implementations - GoSecure

This post is a follow up with items discovered after the first ESI publication. Those discoveries are attack vectors that apply to specific implementations.

gosecure.ai

2

60

210

PentesterLab

@PentesterLab

3 years

As usual, PentesterLab will be running a Black Friday special on the week of the 27th of November. Stay tune.

9

26

196

PentesterLab

@PentesterLab

2 years

Happy 2022! Don't stop learning and hack the planet!

5

16

196

PentesterLab

@PentesterLab

3 years

For people who haven't seen it before, make sure you check our JWT Security Cheatsheet:

1

74

196

PentesterLab

@PentesterLab

2 years

🤫🤫🤫 /100 🤫🤫🤫

38

66

187

PentesterLab

@PentesterLab

3 months

Our booth at CyberSec Asia

2

7

180

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ [PDF] 🗞️

Automation Techniques in C++ Reverse Engineering — Möbius Strip Reverse Engineering

Here are the slides for my recent presentation at RECON, entitled "Automation Techniques in C++ Reverse Engineering". As usual, my slides use in-frame animations, so in brief, navigate them using...

www.msreverseengineering.com

1

56

177

PentesterLab

@PentesterLab

4 years

What is your favorite @PentesterLab challenge/exercise so far?

69

10

172

PentesterLab

@PentesterLab

2 months

Who is your favorite hacker?

141

15

171

PentesterLab

@PentesterLab

4 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ 🗞️

Slack disclosed on HackerOne: Mass account takeovers using HTTP...

This researcher exploited an HTTP Request Smuggling bug on a Slack asset to perform a CL.TE-based hijack onto neighboring customer requests. This hijack forced the victim into an open-redirect that...

hackerone.com

0

47

167

PentesterLab

@PentesterLab

4 years

Do you want to get better at recon❓ The first three challenges of our ReCon badge are now available: ‼️ Did we mention that they are free? 🎉🥳🍾

PentesterLab: Recon Badge

The Recon badge is our set of exercises created to help you learn Reconnaissance. From findings usual files down to DNS and TLS exploration, this badge will help you get better at finding new targets

pentesterlab.com

3

47

169

PentesterLab

@PentesterLab

3 months

Just Another Job Description...

2

18

167

PentesterLab

@PentesterLab

2 years

Every week we tweet the latest articles we discovered: 🗞 🗞 🗞 🗞 🗞 🗞 🗞 #PentesterLabWeekly

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

It was found that unexpected behaviors in the query’s escape function could cause a SQL injection in mysqljs/mysql

flattsecurity.medium.com

3

64

165

PentesterLab

@PentesterLab

6 years

And a free ISO (22MB) for people who want to play with the recent #libssh bug #cve_2018_10933 : #pentesterlab

3

79

163

PentesterLab

@PentesterLab

2 years

أصدرنا للتو ترجمات باللغة العربية لمدة 13 ساعة من مقاطع الفيديو! أعد التغريد للحصول على فرصة لربح قسيمة لمدة 12 شهرًا

16

159

160

PentesterLab

@PentesterLab

3 months

The impact of using AI on your learning experience...

5

22

158

PentesterLab

@PentesterLab

4 years

Is watching the videos cheating? Not at all, do what work for you! Everyone learns differently! Try on your own if that works for you, read the course if needed, watch the video if needed. A few week later, quickly go back to some challenges you struggled with.

8

17

157

PentesterLab

@PentesterLab

1 year

🎉🎉🎉 Happy New Year !!!🎉🎉🎉

8

7

155

PentesterLab

@PentesterLab