#PentesterLab
LightNews LightNews
pentesterlab.com
(H|Bl)ack Friday is Back!
🔥🔥🔥 Black Friday Special 🔥🔥🔥
Get full access to PentesterLab PRO for a year and pay $146.52 instead of $199.99

🎓📚✏️ Student Special ✏️📚🎓
Get full access to PentesterLab PRO for three months year and pay $25.99 instead of $34.99
November 27, 2024 at 6:48 AM
undercode.bsky.social
How to Hack JWT Key Rotation: A Secure Implementation Guide

Introduction JSON Web Tokens (JWTs) are widely used for authentication, but improper key rotation can lead to security vulnerabilities. Louis Nyffenegger, CEO of PentesterLab, highlights a cleaner pattern for JWT key rotation that…
How to Hack JWT Key Rotation: A Secure Implementation Guide
Introduction JSON Web Tokens (JWTs) are widely used for authentication, but improper key rotation can lead to security vulnerabilities. Louis Nyffenegger, CEO of PentesterLab, highlights a cleaner pattern for JWT key rotation that emphasizes strict validation and fail-fast principles. This article dissects secure JWT implementation, offering actionable commands and code snippets for developers and security professionals. Learning Objectives Understand the risks of weak JWT key rotation.
undercodetesting.com
July 13, 2025 at 11:54 PM
bsidesaustin.bsky.social
Thank you to #BSidesAustin prize sponsor @pentesterlab.bsky.social! PentesterLab makes learning web hacking & #security easier. Online systems, code review, videos & courses that can be used to understand, test and exploit bugs.
@bsidessatx.bsky.social @dc512.bsky.social
Thanks to BSides Austin prize sponsor Pentester Lab Event dates: December 5-6, 2024 Austin, Texas
December 2, 2024 at 1:16 AM
maxmnml.bsky.social
Big thx to @hackthebox.bsky.social Meetup Fr for the gift 🎁 One month's Pro subscription to the PentesterLab platform. Thanks to @sniff for donating the prizes 🔥. Let’s go Tryhard 💢
December 19, 2023 at 6:18 PM
alp1n3.dev
Always great posts from Pentesterlab! 🙌
September 3, 2025 at 2:35 PM
alp1n3.dev
Staring @:
- 20+ BChecks I need to write
- An insane number of post ideas
- Several small scripts that “just need a little more tweaking”
- My PentesterLab sub (which is awesome btw 👏)

🫠
December 9, 2024 at 4:42 PM
pentesterlab.com
🚨 New labs just dropped!

3 new Python Code Review labs are now live on PentesterLab 🐍
Learn to spot subtle bugs and insecure patterns by reading real Python code.

🎯 pentesterlab.com/badges/python-code-review

#Python #AppSec #CodeReview #PentesterLab
PentesterLab: Learn with our Python Code Review Badge
The Python Code Review Badge is our badge dedicated to code review in Python. It covers the discovery of weaknesses and vulnerabilities using source code review.
pentesterlab.com
October 28, 2025 at 3:37 AM
pentesterlab.com
PentesterLab isn’t just for pentesters. 🚀

🏆 Rewards for security champions
🌱 Growth for failed interviewees
🔒 Probation challenges for new hires
💡 Hacker mindset for devs
🔍 IR team training
✨ Scouting future security stars

Here’s how companies really use it:
pentesterlab.com/blog/creativ...
PentesterLab Blog: How People Use PentesterLab: Beyond the Usual Training
PentesterLab is more than just a training platform for security professionals—organizations use it in creative ways to enhance security skills across teams. From supporting security champions and trai...
pentesterlab.com
December 25, 2024 at 9:58 PM
semgrep.com
Thank you to everyone who joined us for the PacificHackers & OWASP Meetup last night!

Special shoutout to Louis Nyffenegger, founder of PentesterLab, for leading an unforgettable workshop! 💻

Stay tuned—we’ve got a ton more exciting events lined up, and we can’t wait to see you at the next one! 🔥
February 12, 2025 at 5:48 PM
ept.gg
We won the #cactuscon #ctf last weekend 🥳 Thanks for great challenges and awesome prizes. @pwnEIP @offsectraining @hackthebox_eu @PentesterLab @SANSOffensive @zeropointsecltd
December 27, 2024 at 10:13 AM
pentesterlab.com
Want to prove your API hacking skills?

Earn the PentesterLab API badge!

Hands-on labs designed to test and improve your ability to find and exploit API vulnerabilities.

https://pentesterlab.com/badges/api
PentesterLab: API Badge
The API badge is our set of exercises created to help you learn API testing. The first few challenges are based on challenges you already solved to get you more confident with API testing and review your knowledge and methodology. Then, harder challenges are provided to get you to the next level.
pentesterlab.com
March 2, 2025 at 4:47 AM
thedigitalempress.bsky.social
5. PentesterLab
pentesterlab.com
Master Web Hacking and Security Code Review!
Master penetration testing and security codereview with 600+ exercises and 700+ videos on PentesterLab. Perfect for all skill levels. Start your learning journey today!
pentesterlab.com
January 28, 2025 at 2:55 PM
potato.software
Exciting news! All OzMash orders come with an information and sticker pack!

A big thank you to Payatu, PotatoWave Information Security, nullcon, hardwear.io, BoomerangCon, PentesterLab, Michael Newton, Terry Swan, Matt Dobinson, Antriksh Shah, Hitesh Madhwani, Lily (snail), Amy Nightingale & others
May 27, 2024 at 2:40 AM
alp1n3.dev
PentesterLab!
December 2, 2024 at 3:47 PM
fluid.sublimer.me
PentesterLab Blog: How JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review
PentesterLab Blog: How JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review
https://pentesterlab.com/blog/jwt-algorithm-confusion-code-review-lessons
pentesterlab.com
November 27, 2024 at 1:00 AM
snyff.pentesterlab.com
I just updated PentesterLab Handle to @pentesterlab.com ...
November 26, 2024 at 12:40 AM
pentesterlab.com
🚨 Two New #PentesterLab Labs on GraphQL Authorization Exploits! 🚨

Dive into hands-on labs to learn how to exploit common authorization flaws in GraphQL APIs!

pentesterlab.com/badges/api/

#AppSec #WebSecurity #GraphQL #BugBounty #Pentesting #InfoSec
PentesterLab: Learn with our API Badge
The API badge is our set of exercises created to help you learn API testing. The first few challenges are based on challenges you already solved to get you more confident with API testing and review y...
pentesterlab.com
November 12, 2024 at 3:40 AM
tuxpanik.bsky.social
PentesterLab débarque >>#pentest #infosec

feedproxy.google.com/~r/KorbensBlog…
January 29, 2025 at 2:14 PM
s0ciabl3ng.bsky.social
UGH. Stuck on @PentesterLab #Essentialbadge #autho_06. It's been over an hour and I've tried all I'm going to tonight.
November 11, 2024 at 11:33 PM
andy.codes
My backpack before and after DEFCON.

#defcon #defcon32 @Hak5 @defcongroups @defcon @RedTeamVillage_ @torproject @PentesterLab @HackerBoxes https://t.co/DTruAD121C
November 21, 2024 at 2:43 PM
andy.codes
My backpack before and after DEFCON.

#defcon #defcon32 @Hak5 @defcongroups @defcon @RedTeamVillage_ @torproject @PentesterLab @HackerBoxes @511Tactical https://t.co/BmYmP3VM7q
November 21, 2024 at 2:43 PM
ozhack.bsky.social
Exciting news! All OzHack orders come with an information and sticker pack!

A big thank you to Payatu, CyberWave Information Security, nullcon, hardwear.io, BoomerangCon, PentesterLab, Michael Newton, Terry Swan, Matt Dobinson, Antriksh Shah, Hitesh Madhwani, Lily (snail), Amy Nightingale & others
May 27, 2024 at 2:14 AM
mrsyiswhy.bsky.social
Great guide on JWT vulnerabilities from PentesterLab pentesterlab.com/blog/jwt-vul...
The Ultimate Guide to JWT Vulnerabilities and Attacks (with Exploitation Examples)
Master JWT security with this in-depth guide to web hacking and AppSec. Learn how to exploit and defend against real-world JWT vulnerabilities like algorithm confusion, weak secrets, and kid injection...
pentesterlab.com
June 5, 2025 at 2:59 PM
pentesterlab.com
🚀 Level up your #CyberSecurity skills FOR FREE! 🛡️

Earn the Recon Badge with Pentesterlab and master: 🔍 Virtual Hosts 🌐 DNS Recon 🔒 TLS Recon ...and so much more!

Start your journey today
👉 pentesterlab.com/badges/recon
PentesterLab: Learn with our Recon Badge
The Recon badge is our set of exercises created to help you learn Reconnaissance. From findings usual files down to DNS and TLS exploration, this badge will help you get better at finding new targets
pentesterlab.com
January 25, 2025 at 12:09 AM
s0ciabl3ng.bsky.social
Finally went pro for one year with @PentesterLab
So excited to learn stuff. Gonna start saving up up for @kalilinux #oscp lab time.
November 11, 2024 at 11:32 PM