WebPentester

Web security, explained down to the piece that matters.

Beginner through advanced, and web only. The goal is to learn in a realistic way, on a web application that behaves like a real assessment.

You are looking at a web application. The work is the findings and the flags, not a shell on the host.

Beginner through advanced. The write-up starts in plain language and stays with the detail that makes the issue real.

Some labs later add why the code was vulnerable and how to patch it. That section shows up when it is published.

No machines are open yet. The first labs are planned by the end of the year. Discord is where that is announced.