Secureaks Blog - Ethical Hacking

Penetration testing, or pentesting, is an essential step in assessing the security of web applications. It involves simulating attacks in order to identify and correct potential vulnerabilities. Different approaches to pentesting exist, each offering a unique perspective on system security. The main methods are blackbox, greybox and whitebox testing.

If you love cybersecurity and want to start web pentesting, you're in the right spot.

I'm excited to share a list of resources and platforms that helped me start and continue in my career.

You'll find guides, training platforms, and GitHub repositories here.

To fix an XSS on formatted text, it is not possible to simply encode the data, as this would remove all possibility of text formatting. This is where the "sandbox" parameter of the HTML "iframe" tags will make our life easier. Indeed, this parameter is designed to automatically clean what is in the iframe from anything that could be dangerous, while keeping the harmless HTML tags.

A penetration test is a form of security audit that consists in trying to hack a system (web application, servers, company network...) using the same tools as a real attacker.