Random Posts

Post about anything you want! Including more posting category ideas. I can change them

exitvillain

category: Random Topic

Posted on: March 16, 2025, 11:50 p.m.

exitvillain

category: Random Topic

Posted on: March 16, 2025, 11:40 p.m.

ahh yeah the mobile version doesn't have shit. Burp suite academy is really good. i reccomend one of the youtubers that portswigger links to. z3nsh3ll, he explains it really well. And the portswigger labs are fantastic. Everyone raves about those ask around. Also building a shity web app like this helps you understand how certain web apps can work. I recommend building a couple start with Flask or something like this, do that and also do portswigger at the same time that way you can understand it from a builders perspective and a hackers perspective , that way one day you can really attack them.

Jim

category: Random Topic

Posted on: March 16, 2025, 11:39 p.m.

Ahhh thats cool. Burp suit scares me lowkey lol too much going on.I was thinking about doing a few courses on burpsuit academy to get better with web app. I think after OSEP I will check into that more. On the mobile version I dont see PM

exitvillain

category: Random Topic

Posted on: March 16, 2025, 11:35 p.m.

So i have decided to nail the BSCP, burp suite certified practitioner first. cause my burp suite pro expires in 3 months.

Jim

category: Random Topic

Posted on: March 16, 2025, 11:31 p.m.

When you planning on taking CRTO?

Jim

category: Random Topic

Posted on: March 16, 2025, 2:06 p.m.

Thanks! Hopefully ill figure this out. I have two days left.

Jim

category: Random Topic

Posted on: March 14, 2025, 2:20 p.m.

Can I get a hint? Im in.. looked through all files.

jairo

category: Random Topic

Posted on: March 10, 2025, 7:17 a.m.

After detection of DOM-based/reflected XSS, the most important thing is executing the payload, which is quite different in the real world. We mostly need to create a customized payload for every case. For crafting the XSS payload, "brute logic" categorized it into 7 main cases, which is quite important to know while executing the XSS payload.

https://brutelogic.com.br/blog/the-7-main-xss-cases-everyone-should-know/

jairo

category: Random Topic

Posted on: March 10, 2025, 7:16 a.m.

That's a fantastic insight! Many beginners overlook the difference between View Source and Inspect Element, but understanding it is crucial for finding DOM-based XSS. Your explanation is clear and to the point—definitely the kind of tip that can level up someone's XSS testing game! Looking forward to your video; it sounds like it'll be super valuable!

exitvillain

category: Random Topic

Posted on: March 6, 2025, 7:49 p.m.

Here's something I didn’t realize until recently while studying DOM-based vs. reflected XSS: The HTML you see when you right-click and Inspect Element is not the same as what you see in View Page Source. View Source shows the original HTML from the server. Inspect Element shows the live DOM after JavaScript has executed. This difference is huge when testing for XSS vulnerabilities. For example, with Reflected XSS, you might see the payload in View Source, but with DOM-based XSS, it’ll only appear in the DOM via Inspect Element. will make a video on this.