PentesterLab @PentesterLab

We make learning web hacking and security easier. Online systems, code review, videos & courses that can be used to understand, test and exploit bugs! pentesterlab.com Melbourne, Victoria Joined December 2011

Tweets

11K
Followers

192K
Following

0
Likes

12K

PentesterLab @PentesterLab

49 minutes ago

🧩 Puzzle 08 is live! A compact Go code review + exploitation challenge to sharpen your auditing skills. Try it: pentesterlab.com/exercises/puzz…

0 1 11 611 2

PentesterLab @PentesterLab

6 hours ago

Content worth checking discovered last week: 🤖 joshua.hu/llm-engineer-r… 🪲 semgrep.dev/blog/2025/find… 🛹🐶 github.com/skateboardingd…

0 2 8 2K 7

Yadhavi @PrincessYadhavi

5 days ago

#100daystolearnandimprove #100DaysOfHacking Today I am starting 100 days of hacking challenge. This is the fifth year in a row. In this challenge, I want to focus on web app hacking and #bugbounty. I want to finish all labs and topics from @PentesterLab

1 1 9 3K 4

PentesterLab @PentesterLab

a week ago

🚀 New labs just dropped! The Python Code Review badge now includes 4 fresh labs! Sharpen your code-review skills! Check them out: pentesterlab.com/badges/python-… #Python #CodeReview #Infosec

1 3 22 3K 15

PentesterLab @PentesterLab

2 weeks ago

🚨 Last cohort of 2025! Join our Security Code Review Training 🧑‍💻 📅 Nov 4, 11, 18, 25 (EU/ME friendly hours) 4×3h live sessions + homework + Discord + 1yr PentesterLab PRO Seats limited → pentesterlab.com/live-training/…

0 1 12 3K 0

geej @notgeej

2 weeks ago

Hack the 🌏 @PentesterLab

1 3 70 5K 11

Download Image

Ruben Sousa @RubenSousa007

2 weeks ago

I just completed @PentesterLab's recon badge!!!

0 3 10 4K 0

PentesterLab @PentesterLab

3 weeks ago

A good mix of everything to please everyone: CVEs, AI, Integrity Bypass and Unicode 🛠 blog.doyensec.com/2025/09/02/ksm… 🔐 blog.trailofbits.com/2025/09/03/sub… 📰 blog.kulkan.com/in4m-keeping-u… 🤖 executiveoffense.beehiiv.com/p/ai-hackbots-… 🍪 portswigger.net/research/cooki…

2 20 72 6K 53

PentesterLab @PentesterLab

3 weeks ago

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1

3 4 64 7K 8

Download Image

PentesterLab @PentesterLab

3 weeks ago

🚨 New PentesterLab challenge: CVE-2022-24720 in Rails Active Storage Abusing send() in image variants → full RCE. Learn how it works, exploit it, then see how public_send fixes it. 👉 pentesterlab.com/exercises/cve-…

1 5 17 3K 2

PentesterLab @PentesterLab

4 weeks ago

🚨 Free Labs of the Month 🚨 This time: ORM leaks in Python apps ⚡ Learn how small mistakes in query handling can expose sensitive data. 👉 pentesterlab.com/exercises/orm-… 👉 pentesterlab.com/exercises/orm-… Hands-on. Free. Go break things. 🐍

1 6 36 3K 15

Louis Nyffenegger @snyff

4 weeks ago

As an engineer, I ❤️ clever engineering. Ruby on Rails relies on signed sessions (AES GCM). They are secure, but there is a catch: you cannot invalidate them early. You have to wait for expiry. Workarounds exist, like caching sessions you want to kill, but nothing universal.

2 4 35 7K 8

PentesterLab @PentesterLab

4 weeks ago

🚀 We just released 3 new labs as part of our Python Code Review Badge! These labs walk you through real vulnerabilities: you’ll spot the issue in the code and then review the patch that fixed it. Start practicing now: pentesterlab.com/badges/python-…

2 4 34 4K 8

PentesterLab @PentesterLab

4 weeks ago

If you work at GitHub, you should study every security issue published by GitLab! They are Security Twins: same language, same framework, same features, same risks. Learn how to apply this mindset to your own app: pentesterlab.com/blog/security-…

0 3 16 3K 16

PentesterLab @PentesterLab

a month ago

Dupes in bug bounty are like stalemates in chess ♟️. Disappointing but a good sign that you're getting better.

7 11 76 8K 11

PentesterLab @PentesterLab

a month ago

2 new labs + 2 new videos added to our Golang Code Review Badge 🎉 Level up your Go security code review skills: 👉 pentesterlab.com/badges/golang-…

0 3 17 3K 5

PentesterLab @PentesterLab

a month ago

One company kept coming up again & again in Code Review Badge celebrations: @fluidattacks 👀 Every tester goes through @PentesterLab training before onboarding. Why? ➡️ It builds real-world code review skills ➡️ Helps find issues tools miss ➡️ Becomes a strength, not a struggle…