No assignment this week for theXSSrat's #CNWPP course, so one was selected from course materials:
compare/contrast of
#OWASP
#NIST &
#ISSAF methodologies.

https://medium.com/@iz_floresta/comparing-three-powerhouses-ba1e358e12ec

My latest blog post, featuring material and tricks I've picked up in theXSSrat's Certified Network & Website Pentesting Professional (#CNWPP) prep course.

https://medium.com/@iz_floresta/slipping-through-the-cracks-d0a15d5aa5a9

My latest blog post, an assignment from theXSSrat's Certified Network & Website Pentesting Professional (#CNWPP ) prep course:

https://medium.com/@iz_floresta/the-art-of-port-scanning-7a7d418f943f

My latest blog post on manipulating JWT tokens in PortSwigger labs with the super cool JWT Editor extension for #Burpsuite.

This is result of another assignment from The XSS Rat's #CNWPP prep course.

https://medium.com/@iz_floresta/json-web-token-attacks-with-burp-suite-1ca8938c6843

My write-up on CSRF bypassing on PortSwigger labs, part of an assignment for The XSS Rat's #CNWPP prep course.
#webapplicationsecurity #owasp #cybersecurity

https://medium.com/@iz_floresta/bypassing-csrf-token-validation-2d718ac77f6a