Posts

All the articles I've posted.

• PKI & Certificates for Pentesters: How Digital Trust Works

  1 May, 2021

  Master Public Key Infrastructure and X.509 certificates. Learn how digital trust works, certificate validation, common misconfigurations, and certificate-based attacks for penetration testing.

• Encoding vs Encryption vs Hashing: A Pentester's Guide

  20 Apr, 2021

  Master the differences between encoding, encryption, and hashing. Learn when each is used, common mistakes developers make, and how to exploit misuse in penetration testing.

• TLS/SSL Handshake Explained: How HTTPS Works and How to Attack It

  5 Apr, 2021

  Master TLS/SSL for penetration testing. Learn how the TLS handshake works, cipher suites, certificate validation, and common attacks like BEAST, POODLE, and Heartbleed.

• DNS Deep Dive for Pentesters: How DNS Works and How to Attack It

  20 Mar, 2021

  Master DNS for penetration testing. Learn how DNS works, record types, zone transfers, DNS attacks, and enumeration techniques every pentester needs to know.