Came across a new site that represents a local company. It lacks an SSL certificate across the entire site and contains PHP login scripts.
I'm pretty new to pentesting and was wondering what are some common methods for taking advantage of this vulnerability?
I'm pretty new to pentesting and was wondering what are some common methods for taking advantage of this vulnerability?
Keep calm, chive on.

