Hacking a new web application from start to finish

https://is1-ssl.mzstatic.com/image/thumb/Podcasts123/v4/7a/f1/5e/7af15ead-0aba-213a-1052-9f54a5a346b0/mza_3496604499725780714.jpg/600x600bb.jpg

Hack for Fun and Profit

thehackerish

11 episodes

1 week ago

Hack for Fun and Profit is a weekly podcast for anyone who is interested in ethical hacking. The topics include bug bounty hunting, penetration testing, red teaming and many more. Sit back and enjoy stories, tips and tricks that will inspire you. For subscription-only episodes, enroll using this link: https://anchor.fm/thehackerish/subscribe

How To

Education

RSS

All content for Hack for Fun and Profit is the property of thehackerish and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

How To

Education

https://d3t3ozftmdmh3i.cloudfront.net/production/podcast_uploaded_nologo/4323455/4323455-1585678150553-ad7665202020c.jpg

Hacking a new web application from start to finish

Hack for Fun and Profit

15 minutes 34 seconds

5 years ago

Hacking a new web application from start to finish

Hello ethical hackers and bug bounty hunters! I’ve recently conducted a successful penetration testing against a web application built using Google Web Toolkit, and I want to share with you the process I followed and the bugs I found. Hopefully, this episode will inspire you to try harder during your own bug bounty hunting and penetration testing journey.

I will briefly explain what Google Web Toolkit is and what research has already been made around it. Then, I will explain why and how I built a Burp extension to help me during the penetration testing process. Finally, I will share with you some vulnerabilities I found, especially a cool one which required further effort. So stay with me as we smash this web application into pieces!

Read more details on https://thehackerish.com/hacking-a-google-web-toolkit-application/

Watch the Broken Access Control approach on https://youtu.be/TJQpOrtet8E

Read about IDOR on https://thehackerish.com/idor-explained-owasp-top-10-vulnerabilities/