Giedrius 
Welcome to the Tryhackme write-up series. Today we going to analyze a room that should be one of the first ones for everyone that starts a journey on Try Hack Me. The room is called Vulnversity. This room focuses on active reconnaissance and the main tools for it, it has tasks related to web application …
OSCP is probably the most dreaded certificate for a penetration tester. And for someone who is trying to start a career as a penetration tester, this is a magic bullet that will help you to get noticed by the recruiters. At the same time, it will give you solid knowledge and skills (that you will …
Probably majority of the cybersecurity (and development) specialists, know about the OWASP organization. Being out there for a long time, Open Web Application Security Project became a synonym for various security practices and vulnerable applications. As the OWASP is non-profit organization, most of the projects are led by the community. And the main brainpower behind …
If you are using WordPress, this article Is just for you, as it focuses on security tips for VPS after WordPress migration from shared hosting. But if you are not using WordPress and have nothing to do with migration, that’s totally fine. All the tips explained there are pretty universal, and I guarantee that it …
Sublist3r is one of the most widely used tools for enumerating subdomains. A Python based script that uses OSINT, can help you to identify every subdomain of the target. At the moment of publishing this article, Sublist3r has almost 6000 stars on GitHub. This shows that the tool is pretty popular and is one of …
WordPress security without a doubt is a serious concern. According to the statistics, 41.1 % of the websites on the internet uses WordPress. Cybersecurity company Sucuri says that, in 94.23% of the CMS infection cases of their clients, WordPress was used. As the security of WordPress is one of the key improvements areas for the …
Long are the days when computers taking a whole room. were norm. Nowadays a fully functional computer can be fitted into a palm. The current technological possibilities benefit every industry. Cybersecurity is not an exception. If dedicated expensive hardware was needed back in the days to have a “hacking station”, today a microcomputer, costing several …
What is DVWA? The DVWA, or in full the Damn Vulnerable Web App is an application for testing security vulnerabilities. It is aimed at people who want to practice penetration testing in a legal way by using a legal target. Getting started with the DVWA is one of the best ways to start learning legal …