Pentesting Resources¶
Web App Pentest / Bug Bounty¶
- Keyhacks
- Book of Bug Bounty Tips
- BugReader
- Web App Pentest Mind Map
- Web Application Security Mind Map
- HowToHunt
- PayloadsAllTheThings
- Medium Article on Web App Pentest
Android App Pentest¶
API Pentest¶
iOS App Pentest¶
Source Code Review¶
Thick Client Pentesting¶
- Thick Client Basics
- Thick Client Penetration Testing Methodology
- Introduction to File Operation Abuse on Windows
- Thick Client Exploitation to Becoming Kubernetes Cluster Admin
- More Thick Client Fun
- Thick Client Proxying
- Burp Non-HTTP Extension
- Thick Client (In)Security
- Introduction to Hacking Thick Clients Part 1: The GUI
- Build a TCP Proxy in Python