Hack Forums
How can I find vulnerabilities in websites? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How can I find vulnerabilities in websites? (/showthread.php?tid=6266995)



How can I find vulnerabilities in websites? - dtb1031231 - Mar 27, 2024

Hello everyone, I don't have much experience in this field but I have a strong interest in learning about it.

Can anyone tell me how most vulnerabilities in websites are found?


RE: How can I find vulnerabilities in websites? - BiNBo - Mar 27, 2024

Look into the OWASP Top 10. https://owasp.org/www-project-top-ten/

Quote:"The OWASP Top 10 is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web applications." ~OWASP




RE: How can I find vulnerabilities in websites? - xCiph3r - Mar 29, 2024

I also recommend for learning this stuff "tryhackme".


RE: How can I find vulnerabilities in websites? - msrobar - Apr 8, 2024

search some information about owasp


RE: How can I find vulnerabilities in websites? - DynamicW - Apr 13, 2024

Portswigger and THM have some pretty good learning resources for beginners who want to learn website hacking and stuff like that.


RE: How can I find vulnerabilities in websites? - Code-X - Apr 14, 2024

even, you can learn more on ( hackthebox )


RE: How can I find vulnerabilities in websites? - joeflower - Apr 14, 2024

yes for beginners its really good side. https://www.hackthebox.com/


RE: How can I find vulnerabilities in websites? - SilentNuke - Apr 15, 2024

TryHackMe is a very good resource for learning web vulnerabilities.


RE: How can I find vulnerabilities in websites? - Radimir007 - Apr 18, 2024

Try to use some linux tools like nmap, gobuster...