Penetration Testing Guides

SapiensHack

1 hour ago2 min read

Penetration Testing

Start Here: SapiensHack Learning Path

SapiensHack

1 hour ago2 min read

Tools & Techniques

Tools & Techniques: gf Patterns for URL Triage

SapiensHack

1 hour ago2 min read

Tools & Techniques

Tools & Techniques: Amass for Asset Discovery

SapiensHack

1 hour ago2 min read

Tools & Techniques

Tools & Techniques: httpx for HTTP Probing

SapiensHack

1 hour ago2 min read

Tools & Techniques

Tools & Techniques: Nuclei for Known Issue Checks

SapiensHack

1 hour ago2 min read

Tools & Techniques

Tools & Techniques: ffuf for Content Discovery

SapiensHack

1 hour ago2 min read

Career

Career: A 90-Day Pentest Learning Roadmap

SapiensHack

1 hour ago2 min read

Network Hacking

Network Hacking: Safe Engagement Practices

SapiensHack

1 hour ago2 min read

Network Hacking

Network Hacking: From Perimeter to Application

SapiensHack

1 hour ago2 min read

Network Hacking

Network Hacking: Service Enumeration Basics

SapiensHack

1 hour ago2 min read

Network Hacking

Network Hacking: Host Discovery for Authorized Scopes

SapiensHack

1 hour ago2 min read

API Hacking

API Hacking: Rate Limiting and Resource Consumption

SapiensHack

1 hour ago2 min read

API Hacking

API Hacking: GraphQL Authorization Consistency

SapiensHack

1 hour ago2 min read

API Hacking

API Hacking: Mass Assignment and Excess Data Exposure

SapiensHack

1 hour ago2 min read

API Hacking

API Hacking: Broken Object Level Authorization (BOLA)

SapiensHack

3 hours ago2 min read

Web Hacking

Insecure Deserialization: Why Object Parsing Is Dangerous

SapiensHack

3 hours ago2 min read

Web Hacking

Race Conditions in Web Apps: Limit Checks and TOCTOU Bugs

SapiensHack

3 hours ago2 min read

Web Hacking

Information Disclosure: The Quiet Vulnerability Class

SapiensHack

3 hours ago2 min read

Web Hacking

RCE and File Inclusion Risks: A High-Level Map for Testers

SapiensHack

3 hours ago2 min read

Web Hacking

Start Here: SapiensHack Learning Path

Tools & Techniques: gf Patterns for URL Triage

Tools & Techniques: Amass for Asset Discovery

Tools & Techniques: httpx for HTTP Probing

Tools & Techniques: Nuclei for Known Issue Checks

Tools & Techniques: ffuf for Content Discovery

Career: A 90-Day Pentest Learning Roadmap

Network Hacking: Safe Engagement Practices

Network Hacking: From Perimeter to Application

Network Hacking: Service Enumeration Basics

Network Hacking: Host Discovery for Authorized Scopes

API Hacking: Rate Limiting and Resource Consumption

API Hacking: GraphQL Authorization Consistency

API Hacking: Mass Assignment and Excess Data Exposure

API Hacking: Broken Object Level Authorization (BOLA)

Insecure Deserialization: Why Object Parsing Is Dangerous

Race Conditions in Web Apps: Limit Checks and TOCTOU Bugs

Information Disclosure: The Quiet Vulnerability Class

RCE and File Inclusion Risks: A High-Level Map for Testers

CORS, postMessage, and Origin Mistakes in Modern Web Apps