Search for a command to run...
A security guy with 5+ years of experience in web application and mobile pen-testing. My work has been acknowledged across the globe. I have worked with more than 300+ companies to secure them.
No comments yet. Be the first to comment.
Programming is a key skill for mid-level and upper-level cyber security roles. In this series, I will be sharing my notes on python language.
An array is a collection of items stored together in sequential memory locations. The idea is to store multiple items of the same type together. So there are three ways we can reverse an array in python, 1. Slicing We can use slicing to turn any nor...
Ultimate Strategy And Tools To Pass OSCP
![How I passed OSCP on the first attempt? [ Part 2 ]](/_next/image?url=https%3A%2F%2Fcdn.hashnode.com%2Fres%2Fhashnode%2Fimage%2Fupload%2Fv1686190683044%2F403df02f-7fd6-4229-b768-9b3ccbbbb123.avif&w=3840&q=75)
Get Started With CI/CD Using GitHub Actions
Passing OSCP with proper planning and preparation
![How I passed OSCP on the first attempt? [ Part 1 ]](/_next/image?url=https%3A%2F%2Fcdn.hashnode.com%2Fres%2Fhashnode%2Fimage%2Fupload%2Fv1675787059447%2F54cf15e1-02f9-4f54-b80c-af67f51d1505.png&w=3840&q=75)
Using "Digital Signatures" we can verify if the file is authentic even if we downloaded it from non-official resources
How my "Unsubscribe Tragedy" could have been another security nightmare? 🤔
Dashboards are necessary especially when you are doing much more advanced stuff. Pentesters/Bug bounty hunters can save both time and energy by building efficient dashboards to bring ease to their jobs. By dashboards what I mean is basically automating your entire methodology and bringing that whole overview into a dashboard. If you use tools like subfinder, amass and dirsearch etc. for your daily hunting/pentest job then why not automate these tools to build a smooth workflow which will help you do your tasks faster.
For this, I will be recommending python since I'm guessing you are completely new to building dashboards.
Python is easy to learn and FLASK is for fast development which gives you the power to build something quite faster than traditional languages or frameworks. I usually design an idea diagram of the whole program and then start writing code to turn the idea into reality.
We can deploy the open-source bug bounty/pentest recon tools using subprocess and launch them in FASTAPI to reduce the load in the main application. After that, you can focus on fetching and extracting various data, especially JSON to gather data from these microservices.
You can use all these free FLASK templates to build your dashboards:
Now all you need to do is just plug and play, Deploy the tools using FASTAPI and capture them using your FLASK application to populate your dashboard.
