Red Team 18
- AWS Pentesting - Flaws Level 6 - When the Gateway Finally Falls
- AWS Pentesting - Flaws Level 5 - Exploiting AWS IMDS via SSRF
- AWS Pentesting - Flaws Level 4 - When EBS Snapshots Leak Secrets
- AWS Pentesting - Flaws Level 3 - From Public Bucket to AWS Keys
- AWS Pentesting - Flaws Level 2 - When S3 Is Not Public but Still Exposed
- AWS Pentesting - Flaws Level 1 - When S3 Is Open to Everyone
- Commonwealth Bank - Conducting a Web Application Penetration Test
- HackThisSite - Basic Level 11 - Exposed .htaccess Files
- HackThisSite - Basic Level 10 - Cookie Manipulation
- HackThisSite - Basic Level 9 - Cross-Directory SSI Injection
- HackThisSite - Basic Level 8 - SSI Injection
- HackThisSite - Basic Level 7 - Command Injection
- HackThisSite - Basic Level 6 - Weak Encryption
- HackThisSite - Basic Level 5 - Insecure Password Recovery via Hidden Fields
- HackThisSite - Basic Level 4 - Insecure Password Recovery via Request Manipulation
- HackThisSite - Basic Level 3 - Publicly Accessible Sensitive Files
- HackThisSite - Basic Level 2 - No Password File
- HackThisSite - Basic Level 1 - Hardcoded Password Vulnerability