7MS #626: Web Pentesting Pastiche

episode

7 Minute Security not yet transcribed

▲ 0

Transcript

This episode hasn't been transcribed yet Upvotes decide what gets transcribed next — 0 so far. Sign in to upvote

Related

recent transcribed audio

Win Brooke's Bucks (9/29/26) 11 min · 29 Sep 2026 · Brooke and Jeffrey

A Relaxing Visit to Ek Balam 44 min · 29 Sep 2026 · Get Sleepy: stories for sleep

Ep. 2070 - Republican Campaign Ad Brutalizes Lazy White Men 51 min · 29 Sep 2026 · The Michael Knowles Show

The Dollar-Store Hour: Why Doing It Yourself is Costing You Millions 3 min · 29 Sep 2026 · The Level Up Podcast w/ Paul Alex

BREAKING: Lindsay Clancy Will Be Retried; Judge Pushes for New Trial Date 32 min · 29 Sep 2026 · Amy Robach & T.J. Holmes Present

Trailer 3 min · 29 Sep 2026 · Curious Cases

Report any issue

Source

Recorded31 May 2024

Publisher7minsec.libsyn.com ↗

Handlerec:8650010

Show notes

Hey friends, today we've got a security milkshake episode about Web app pentesting. Specifically we talk about: Burp Suite Enterprise Caido – a lightweight alternative to Burp wfuzz – Web fuzzer. Using a proxy:wfuzz -c -z file,/usr/share/wfuzz/wordlist/Injections/XSS.txt –sc 200 "https://somedomain.com/shopping?&qty=%2FUZZ" -p 10.0.7.11:8080 KNOXSS – for XSS testing – pairs nicely with this wrapper: https://github.com/xnl-h4ck3r/knoxnl In the tangent dept, I moan about how I hate some things about Proxmox but am also starting to love it. In the tangent #2 department, I talk about tinnitus and acupuncture!

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Sign in