PentesterLab @PentesterLab Twitter profile

Pinned Tweet

PentesterLab

@PentesterLab

1 year

A quick tour of our new Enterprise features!

8

11

118

Last Seen Profiles

@tladpwl03

@phillydesign

@PCSPatriots

@Marina122221

@slayza_vy

@SDynamite

@Brettbolte2

@stakewolle

@Trom14_

@urfavbeean

@TryThisDotCo

@nenad_d1977

@AusSpaceAgency

@HariPradha27251

@weajlth

@eduardvila5

@RayOfPitchBlack

@ThusoMbedu

@mufti_sajid_

@Pretend_Friends

@_CABA091

@developer_fabio

@heavenlyoph

@coachbellucci

@kimbukim77

@PCJalisco

@Prau_Choudhary_

@KarinPlaninsek

@StanOxley487072

@DreeaGypset

@KadriGursel

@MEISMinor

@Back2Festivals

@Brownspice12312

@gammai7bo

@prophetmetu

PentesterLab

@PentesterLab

4 years

Our Black Friday Special is now live: One-year: US$146.52 instead of US$199.99 Student (3-month): US$27.99 instead of US$34.99 Happy Hacking!

30

194

8K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet !! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet !!

181

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

184

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

164

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! To celebrate 80k followers! We are going to give a 1-month voucher to **80** people who RT this tweet (picked randomly)! We are going to send our socks, t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet (picked randomly)!!

182

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

144

1K

2K

PentesterLab

@PentesterLab

2 years

Thanks everyone for your support! Let's do it now! We will give away 140 x 1-month subscription. To enter you just need to interact with this tweet (like/RT/...)!

PentesterLab

@PentesterLab

2 years

We were planning 70 x 1-month voucher for our 70k followers. We are going to double it (140 x 1-month) if we reach 70k followers before the end of Def Con!

128

325

1K

375

938

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

167

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

160

969

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

110

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

148

1K

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

176

1K

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

116

1K

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

131

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! To celebrate 60k followers! We are going to send our new socks and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-month voucher to **60** people who RT this tweet!

163

1K

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

134

937

2K

PentesterLab

@PentesterLab

2 years

🍾🪩🪅🎉🥳Giveaway time! 🥳🎉🪅🪩🍾 We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

117

867

2K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

118

889

2K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

100

941

2K

PentesterLab

@PentesterLab

2 years

Giveaway time! To celebrate 50k followers! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-month voucher to **50** people who RT this tweet!

132

931

1K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

121

944

1K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

98

878

1K

PentesterLab

@PentesterLab

2 years

10 more sleeps before our BLACK FRIDAY SPECIAL! Let's do a Giveaway in the meantime! We are going to: * Send a swag pack to one person who follows @PentesterLab and RT this tweet!! * Give 12-month voucher to someone who follows @PentesterLab and ♥️ this tweet!!

137

882

1K

PentesterLab

@PentesterLab

2 years

Ok, let's try to do a swag giveaway. We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !!

107

117

1K

PentesterLab

@PentesterLab

2 years

Black Friday Giveaway! Make sure you check our deals: We are going to send a t-shirt and a few goodies to one person who retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

111

858

1K

PentesterLab

@PentesterLab

2 years

Another giveaway! We are going to send a t-shirt and a few goodies (including socks) to one person who follows @PentesterLab and retweets this tweet !! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet !!

133

864

1K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

75

823

1K

PentesterLab

@PentesterLab

2 years

Time for another swag giveaway! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !!

115

121

1K

PentesterLab

@PentesterLab

2 years

Time for another swag giveaway! You know the drill: We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !!

114

109

1K

PentesterLab

@PentesterLab

7 months

Every Single Time...

14

178

1K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

77

747

1K

PentesterLab

@PentesterLab

2 years

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

94

825

1K

PentesterLab

@PentesterLab

2 years

Another Black Friday Giveaway! Make sure you check our deals: We are going to send a t-shirt and a few goodies to one person who retweets this tweet!! And we are going to give a 12-month voucher to someone who likes this tweet!!

89

743

1K

PentesterLab

@PentesterLab

2 years

Final Giveaway! This time for #Cyber Monday Make sure you check our deals: We are going to send a t-shirt and a few goodies to one person who retweets this tweet!! And we are going to give a 12-month voucher to someone who likes this tweet!!

58

655

1K

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

101

732

1K

PentesterLab

@PentesterLab

2 years

We were planning 70 x 1-month voucher for our 70k followers. We are going to double it (140 x 1-month) if we reach 70k followers before the end of Def Con!

128

325

1K

PentesterLab

@PentesterLab

1 year

🎉🥳🎉 We just reached 110K followers! 🎉🥳🎉 🎉🥳🎉🥳Let's celebrate! 🎉🥳🎉🥳 We are going to give a 1-month voucher to 110 people who RT this tweet and follow @PentesterLab (picked randomly)!

109

904

827

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

78

544

827

PentesterLab

@PentesterLab

5 years

Want to bypass WAF when exploiting CVE-2019-5418 ? curl -H 'Accept: ../../../../../../e*c/p*s*d{{' http://server/...

14

277

823

PentesterLab

@PentesterLab

1 year

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

66

508

819

PentesterLab

@PentesterLab

2 years

Two more days before our Black Friday specials! And we just reached 90K followers! Let's celebrate! We are going to give a 1-month voucher to 90 people who RT this tweet and follow @PentesterLab (picked randomly)!

105

978

794

PentesterLab

@PentesterLab

3 years

Not going to show off but some of our labs cover how to access the source code of an HTML page.

26

70

755

PentesterLab

@PentesterLab

1 year

To celebrate our new channel ! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

AppSecSchool

Hi, welcome to our new youtube channel named AppSecSchool. Our goal with this channel is to cover the less technical aspects of Application Security, especially for people working or wanting to work...

www.youtube.com

66

435

700

PentesterLab

@PentesterLab

2 years

We put together a small XSS challenge: http://157.230.239.59:1234/ The goal is to get an alert box using a script tag.

46

75

459

PentesterLab

@PentesterLab

3 years

Two new wallpapers are now available! Dark mode vs light mode...

19

49

410

PentesterLab

@PentesterLab

5 months

🚨🚨🚨 Too many people miss critical vulnerabilities because they assume a GET request can't have a body! 🚨🚨🚨 This is how you can send such a request using #curl : $ curl '0.0.0.0:1234/download?filename=TEST' --data 'filename=../../../../../../../etc/passwd' -X GET

5

82

430

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ 🗞️ 🗞️

hipotermia - HTTP Request Smuggling + IDOR

A bug chain of HTTP Request Smuggling and an IDOR which allows to retrieve user sensitive data

hipotermia.pw

1

164

390

PentesterLab

@PentesterLab

6 years

We just released our JSON Web tokens cheatsheet:

2

174

381

PentesterLab

@PentesterLab

3 years

You pop a shell, what is the first command you run?

242

29

378

PentesterLab

@PentesterLab

3 years

And we just released our latest challenge: Log4j Remote Code Execution:

PentesterLab: Log4j RCE

This lab focuses on exploiting a vulnerability in Log4j by setting up a malicious LDAP server and using a specific payload to gain code execution. It provides step-by-step instructions and necessary...

pentesterlab.com

5

96

383

PentesterLab

@PentesterLab

5 months

We would like to welcome our new team member: Jia Tan! Jia will work on a set of challenges for our "Supply Chain" badge!!

16

40

363

PentesterLab

@PentesterLab

6 months

8

46

318

PentesterLab

@PentesterLab

5 years

Just in case someone wonders: bcrypt.

18

27

292

PentesterLab

@PentesterLab

5 years

Good articles discovered last week: 🗞️ 🗞️ 🗞️

Account Takeover Using Cross-Site WebSocket Hijacking (CSWH)

Hello ,

sharan-panegav.medium.com

2

114

286

PentesterLab

@PentesterLab

5 years

Our latest exercise on PDF SSRF based on the excellent talk from @daeken and @NahamSec at DefCon 2019 is now available:

PentesterLab: SSRF in PDF generation

In this lab, you'll explore a Server Side Request Forgery (SSRF) vulnerability using Weasyprint to gain unauthorized access to internal resources by crafting a malicious HTML page. You'll learn how...

pentesterlab.com

2

68

260

PentesterLab

@PentesterLab

3 years

How it started. How it is going.

5

14

256

PentesterLab

@PentesterLab

2 years

हमने अभी 13 घंटे के वीडियो के लिए हिंदी में सबटाइटल जारी किए हैं! 12 महीने का वाउचर जीतने का मौका पाने के लिए रीट्वीट करें

49

231

251

PentesterLab

@PentesterLab

5 years

We are partnering with @Bugcrowd to help researchers find more and better bugs: !!! P1📈 P5📉

Bugcrowd + PentesterLab — Learn Web Hacking Easier! | @Bugcrowd

As we open a new year, Bugcrowd is continuing to drive toward its goal of continued investment in the development of its researchers. We are overwhelmingly proud to announce that we’re partnering...

www.bugcrowd.com

6

63

247

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️

Write up of two HTTP Requests Smuggling

This article about how I found two sites for HTTP Request Smuugling

medium.com

1

89

234

PentesterLab

@PentesterLab

5 months

Five activities every web hacker should do at least once: 1. Read the source code of an HTTP request parser 2. Write a small web application with registration, authentication, file upload... 3. Read an RFC 4. Participate in a Capture The Flag competition. 5. Fix a

1

56

236

PentesterLab

@PentesterLab

2 years

🎉🎉 50k followers!! 🎉🎉 🎉🎉 Thanks everyone for your support!🎉🎉

23

12

236

PentesterLab

@PentesterLab

4 years

How it started: How it’s going:

2

13

222

PentesterLab

@PentesterLab

4 years

PentesterLab PRO is 5 years old...

24

4

222

PentesterLab

@PentesterLab

5 years

And our Black Friday Sale is Live: 2*13.37% off on the one year subscription!

10

65

222

PentesterLab

@PentesterLab

7 months

Stop reading dozens of hacking/security books. Focus on taking action: ‣ Hands-on learning ‣ Hack on real applications/networks (open source projects, bug bounty...) ‣ Read write-ups (CTF, bug bounty, vulnerability research...) ‣ Meet like-minded people (twitter, discord,

3

33

184

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ 🗞️

Bypass SameSite Cookies Default to Lax and get CSRF

SameSite=Lax Cookies by Default is a new browser feature we will look at how to bypass it and what is the security concerns with it..

medium.com

2

92

211

PentesterLab

@PentesterLab

1 year

🗞 🗞 🗞 🗞 🗞 🗞 🗞 🗞 🗞 #PentesterLabWeekly

Probing the Server-Side: Detecting and Exploiting Prototype Pollution | YesWeHack Learning Bug...

Dive into the realm of server-side prototype pollution with our comprehensive guide. Learn how to detect and exploit this intriguing vulnerability, enhancing your bug bounty hunting and ethical...

www.yeswehack.com

2

67

214

PentesterLab

@PentesterLab

2 years

Articles worth reading discovered last week: 🗞 🗞 🗞 🗞 🗞 🗞 🗞 🗞 #PentesterLabWeek

Zyxel authentication bypass patch analysis (CVE-2022-0342) - hn security

A few months ago, new firmware […]

security.humanativaspa.it

2

59

207

PentesterLab

@PentesterLab

4 years

As usual, PentesterLab will be running a Black Friday special on the week of the 27th of November. Stay tune.

9

26

197

PentesterLab

@PentesterLab

3 years

Happy 2022! Don't stop learning and hack the planet!

5

16

192

PentesterLab

@PentesterLab

3 years

For people who haven't seen it before, make sure you check our JWT Security Cheatsheet:

1

74

195

PentesterLab

@PentesterLab

2 years

🤫🤫🤫 /100 🤫🤫🤫

38

66

187

PentesterLab

@PentesterLab

7 months

Our booth at CyberSec Asia

2

7

178

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ [PDF] 🗞️

Automation Techniques in C++ Reverse Engineering — Möbius Strip Reverse Engineering

Here are the slides for my recent presentation at RECON, entitled "Automation Techniques in C++ Reverse Engineering". As usual, my slides use in-frame animations, so in brief, navigate them using...

www.msreverseengineering.com

1

57

175

PentesterLab

@PentesterLab

5 years

What is your favorite @PentesterLab challenge/exercise so far?

69

10

171

PentesterLab

@PentesterLab

4 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ 🗞️

Slack disclosed on HackerOne: Mass account takeovers using HTTP...

This researcher exploited an HTTP Request Smuggling bug on a Slack asset to perform a CL.TE-based hijack onto neighboring customer requests. This hijack forced the victim into an open-redirect that...

hackerone.com

0

49

169

PentesterLab

@PentesterLab

5 months

Who is your favorite hacker?

138

14

168

PentesterLab

@PentesterLab

4 years

Do you want to get better at recon❓ The first three challenges of our ReCon badge are now available: ‼️ Did we mention that they are free? 🎉🥳🍾

PentesterLab: Learn with our Recon Badge

The Recon badge is our set of exercises created to help you learn Reconnaissance. From findings usual files down to DNS and TLS exploration, this badge will help you get better at finding new targets

pentesterlab.com

3

47

169

PentesterLab

@PentesterLab

6 months

Just Another Job Description...

2

17

163

PentesterLab

@PentesterLab

2 years

Every week we tweet the latest articles we discovered: 🗞 🗞 🗞 🗞 🗞 🗞 🗞 #PentesterLabWeekly

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

It was found that unexpected behaviors in the query’s escape function could cause a SQL injection in mysqljs/mysql

flattsecurity.medium.com

3

64

164

PentesterLab

@PentesterLab

6 years

And a free ISO (22MB) for people who want to play with the recent #libssh bug #cve_2018_10933 : #pentesterlab

3

78

163

PentesterLab

@PentesterLab

2 years

أصدرنا للتو ترجمات باللغة العربية لمدة 13 ساعة من مقاطع الفيديو! أعد التغريد للحصول على فرصة لربح قسيمة لمدة 12 شهرًا

16

158

159

PentesterLab

@PentesterLab

7 months

The impact of using AI on your learning experience...

5

22

154

PentesterLab

@PentesterLab

4 years

Is watching the videos cheating? Not at all, do what work for you! Everyone learns differently! Try on your own if that works for you, read the course if needed, watch the video if needed. A few week later, quickly go back to some challenges you struggled with.

8

17

156

PentesterLab

@PentesterLab

2 years

🎉🎉🎉 Happy New Year !!!🎉🎉🎉

8

7

155

PentesterLab

@PentesterLab

2 years

We have 3 tickets for to give away, please comment and we will pick 3 winners later today!

99

18

154

PentesterLab

@PentesterLab

4 years

25k followers! 🎉🎉🎉 🥳🥳🥳 Thanks everyone for your support!

15

1

152

PentesterLab

@PentesterLab

5 years

Coming soon....

9

21

149

PentesterLab

@PentesterLab

3 years

We just dropped another log4j challenge for more recent versions of Java:

PentesterLab: Log4j RCE II

This exercise demonstrates the exploitation of a vulnerability in Log4j using a gadget to achieve remote code execution (RCE). It involves leveraging the JRMPListener from ysoserial to exploit the...

pentesterlab.com

1

33

147

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️ 🗞️

1

60

148

PentesterLab

@PentesterLab

2 months

Replace 15 minutes of daily social media or TV time with 15 minutes of reading source code or RFC. Small changes can lead to big improvements in your hacking skills!

2

20

150

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️

2

35

145

PentesterLab

@PentesterLab

5 years

Every week, our twitter account @PentesterLab publishes a list of articles worth-reading. This is the list of all the articles for 2019. Enjoy!!

1

51

145

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️

Solving iOS UnCrackable 1 Crackme Without Using an iOS Device

TL;DR: iOS UnCrackable Level 1 crackme application can be solved without using an iOS device using Angr’s dynamic execution engine.

serializethoughts.com

1

33

140

PentesterLab

@PentesterLab

3 years

29k followers! Thanks everybody for your support!

7

1

143

PentesterLab

@PentesterLab

5 years

Articles worth reading discovered last week: 🗞️ 🗞️ 🗞️

1

40

139

PentesterLab

@PentesterLab

4 years

If you solved our SAML IV challenge, you have everything you need to exploit the latest Palo Alto "vulnerability" (CVE-2020-2012):

PentesterLab: SAML: Known Key

This course details the exploitation of an insecure SAML implementation that allows a malicious user to become another user by leveraging default secret keys provided by libraries. The video covers...

pentesterlab.com

4

23

139

PentesterLab

@PentesterLab

5 years

Good articles discovered last week: Anything else worth sharing?

2

54

138

PentesterLab

@PentesterLab

5 years

And we juist released the video of the PDF SSRF exploitation !!

PentesterLab: Videos for the lab SSRF in PDF generation

This page contains the videos for our exercise SSRF in PDF generation, these videos provide an in-depth walkthrough of the issues and how to exploit them

pentesterlab.com

0

26

138

PentesterLab

@PentesterLab

2 years

6

10

138