tkyn

Musings from a mediocre hacker

The Hacker101 Capture the Flag challenges are great practice for learning web application security.

If paired with the accompanying course you will have relatively little issue getting invites.

It took me around an hour and a half to get a single invite to a private program. There are challenges from Beginner to Intermediate difficulty.

https://www.hacker101.com/videos

https://ctf.hacker101.com/

If paired with a PentesterLab subscription, The Web Application Hackers Handbook, running Damn Vulnerable Web Application and attacking. Plenty others exist but these are the best sources in my exerience (which isn’t much :)).

Tags: ,

Updated:

You May Also Enjoy

PLC Web Server Arbitrary File Download

Introduction In this post I’ll go over a simple arbitrary file download vulnerability I found on the webserver of a commonly used PLC. To avoid disclosing t...