lol i take that back about learning css. only learn css if you want to learn how to make your site look nicer. it's a web dev thing, as you probably know. just learn about what it is at least and how to recognize it when you come across it in a burp scan or something, usually we ignore the css lol that's not where the vulnerabiltiies lie usually. and learning html is quick. but def learning javascript is more important in general and def from a web application security standpoint. I apologize you may be a javascript wizz for alli know i have no idea where you are at he he forgive me.

Thanks man! I appreciate that. I will check out Z3nsh3ll and the link you dropped. Will keep you posted on how it goes

Yeah man if you are going to do those Portswigger labs, check out the youtuber z3nsh3ll . pretty much everyone agrees he has the best tutorials. Problem is I'd say he only has walkthroughs for about 70 of the labs out of 269 but that's ok you can start with those. He has labs for almost all XSS labs, I'd say XSS is a great place to start. Also look there are 269 labs it may seem intimidating at first but don't think of it as doing 269 long labs. Cause a bunch of them are grouped together like for insance i just did 5 XXE labs and they were all kinda the same , just one key part was different. so you can kinda tackel a bunch of them at once pretty fast. Tackle related labs in one or two sittings. also, learning some html, css and javascript might be a good idea. learn some of the intermediate/advanced javascript stuff like promises, assyncronous programming, fetch, promises, then blocks, ternary operators learn how to program in javascript. Z3nsh3ll has a great series on this stuff too. If you are just starting out in html/css and javascript id start with the z3nsh3ll ones, and here's another super begginer friendly one: https://cs50.harvard.edu/web/2020/

Nice! I'm gonna start doing some labs on Portswigger soon. I will start with the fundamentals. If you have some good resources to learn about web vulnerabilities / OWASP Top 10 in a bit more depth, please let me know.

One thing I want to suggest is to have a way for users to know when a new response was posted on the site. For example, I don't know that someone posted here until I remember to go in the browser and check if someone responded. Having something like a ping/notification in the email saying that "A new post was made" or something like that would be cool. Maybe this is already implemented, and I don't know. Feel free to let me know, and I will suggest some more ideas when they come.

Hey Delarouge and anyone else out there, So I mainly built this site to get some practice launching a site on amazon. I never built a site with users before I Just wanted to get it out there and see it work. Now that I have, i want to make it better. Can you guys think of any features that , say, discord might not have that I can have? I'm open to building any weird feature.

Finished my 123/269th lab on the PortSwigger Web Application Security Academy! I have 25 days max until I’m sitting for the BSCP — I think I can do it!

This SQL injection lab reminds us that the datatype of the columns being returned by the backend SQL query we’re trying to hack… well, it’s important. In this lab, I wanted to leak out the username and password columns of a table, but only one text column was being returned.

So I used string concatenation to return both the username and password as if it were one column. Oh yeah btw, this was a union select attack. Lab: SQL injection UNION attack, retrieving multiple values in a single column <br><br> You can find this and hundreds of other free labs on the PortSwigger Web Security Academy. All you need is Burp Suite Community Edition to get started.

Well, funny you mentioned the mobile thing.. I just read that on my phone, and I had to zoom out and then zoom in when I’m typing. What you have done so far is impressive! So, you will get to it. At least it works. I can’t imagine the hours you put in. No rush, still here.

OK thanks for telling me man i'm about to ramp up all operations . New update to the site coming up, new update to discord, new video, new certifications we are about to get an exitvillain explosion lol what do you think this site needs? def a makeover. i have a new logo i'm about to put haha. I mean i care about functionality more than look. def need to make it mobile friendly right now its ehhh , it works but you have to zoom out its complete shit.

It seems like the discord link expired.. At least that's what it says :(