https://www.lanmaster53.com/ https://www.lanmaster53.com/blog/ https://www.lanmaster53.com/talks/ https://www.lanmaster53.com/projects/ https://www.lanmaster53.com/blog/tags/api/ https://www.lanmaster53.com/blog/tags/appsec/ https://www.lanmaster53.com/blog/tags/burp/ https://www.lanmaster53.com/blog/tags/career/ https://www.lanmaster53.com/blog/tags/flask/ https://www.lanmaster53.com/blog/tags/misc/ https://www.lanmaster53.com/blog/tags/netsec/ https://www.lanmaster53.com/blog/tags/recon-ng/ https://www.lanmaster53.com/blog/tags/tools/ https://www.lanmaster53.com/blog/tags/training/ https://www.lanmaster53.com/about/ https://www.lanmaster53.com/blog/2024/07/15/email-is-dead-long-live-email/2024-07-15 https://www.lanmaster53.com/blog/2023/07/05/burp-bchecks-first-impressions/2023-07-05 https://www.lanmaster53.com/blog/2023/02/01/prototype-polution-in-flask/2023-02-01 https://www.lanmaster53.com/blog/2022/01/05/burp-suite-certified-practitioner-review-part-3/2022-01-05 https://www.lanmaster53.com/blog/2021/11/18/burp-suite-certified-practitioner-review-part-2/2021-11-18 https://www.lanmaster53.com/blog/2021/11/15/burp-suite-certified-practitioner-review/2021-11-15 https://www.lanmaster53.com/blog/2021/06/14/no-knowledge-api-discovery/2021-06-14 https://www.lanmaster53.com/blog/2019/06/14/dynamic-discovery-mass-assignment/2019-06-14 https://www.lanmaster53.com/blog/2019/02/22/a-decade-of-training/2019-02-22 https://www.lanmaster53.com/blog/2018/12/08/get-off-your-butt-and-teach-your-kids-to-code/2018-12-08 https://www.lanmaster53.com/blog/2018/06/18/xss-active-defense/2018-06-18 https://www.lanmaster53.com/blog/2018/05/24/sqli-exploiter-exploiting-complex-sqli/2018-05-24 https://www.lanmaster53.com/blog/2018/03/15/report-spam-get-owned/2018-03-15 https://www.lanmaster53.com/blog/2017/08/26/cooling-down-the-hottest-ticket-in-town/2017-08-26 https://www.lanmaster53.com/blog/2017/04/05/handling-missed-vulnerabilities/2017-04-05 https://www.lanmaster53.com/blog/2016/12/01/proxying-thru-virtual-client-vpns/2016-12-01 https://www.lanmaster53.com/blog/2016/07/15/fun-with-xsshell/2016-07-15 https://www.lanmaster53.com/blog/2016/03/11/exploring-ssti-flask-jinja2-part-2/2016-03-11 https://www.lanmaster53.com/blog/2016/03/09/exploring-ssti-flask-jinja2/2016-03-09 https://www.lanmaster53.com/blog/2015/12/02/validating-redirects-with-hyperlinks/2015-12-02 https://www.lanmaster53.com/blog/2015/06/11/regex-regularly-exploitable/2015-06-11 https://www.lanmaster53.com/blog/2015/05/21/recon-ng-update-v4-6-0/2015-05-21 https://www.lanmaster53.com/blog/2015/05/12/method-interchange/2015-05-12 https://www.lanmaster53.com/blog/2014/10/29/session-fixation-demystified/2014-10-29 https://www.lanmaster53.com/blog/2014/10/02/wifi-user-detection-system/2014-10-02 https://www.lanmaster53.com/blog/2014/05/21/cross-site-trust-exploitation/2014-05-21 https://www.lanmaster53.com/blog/2014/05/16/recon-ng-update-v4-0-0/2014-05-16 https://www.lanmaster53.com/blog/2014/05/11/raspberry-pi-pianobar/2014-05-11 https://www.lanmaster53.com/blog/2014/03/01/dom-based-xss-revisited/2014-03-01 https://www.lanmaster53.com/blog/2014/02/17/defending-against-harvesting-attacks-on-registration-systems/2014-02-17 https://www.lanmaster53.com/blog/2014/01/19/recon-ng-update-v3-3-3/2014-01-19 https://www.lanmaster53.com/blog/2013/11/14/recon-ng-update-v3-0-3/2013-11-14 https://www.lanmaster53.com/blog/2013/10/23/shells-in-restricted-environments/2013-10-23 https://www.lanmaster53.com/blog/2013/07/17/multi-post-csrf/2013-07-17 https://www.lanmaster53.com/blog/2013/05/27/ips-avoidance-with-vulnerability-scanners/2013-05-27 https://www.lanmaster53.com/blog/2013/05/24/public-facing-ldap-enumeration/2013-05-24 https://www.lanmaster53.com/blog/2013/05/24/manual-local-hash-extraction/2013-05-24 https://www.lanmaster53.com/blog/2013/05/23/catching-cleaning-a-phish/2013-05-23 https://www.lanmaster53.com/blog/2013/04/19/a-work-in-progress/2013-04-19 https://www.lanmaster53.com/blog/2013/03/04/taming-the-stubborn-tomcat/2013-03-04 https://www.lanmaster53.com/blog/2012/12/04/defending-against-ssl-stripping-attacks/2012-12-04 https://www.lanmaster53.com/blog/2011/05/27/7-linux-shells-using-built-in-tools/2011-05-27 https://www.lanmaster53.com/blog/2011/05/13/stealth-cookie-stealing-new-xss-technique/2011-05-13 https://www.lanmaster53.com/blog/2011/05/09/local-file-inclusion-to-remote-command-execution-using-ssh/2011-05-09 https://www.lanmaster53.com/blog/2011/04/21/official-release-eapmd5cracker-py/2011-04-21 https://www.lanmaster53.com/blog/2011/04/21/defeating-802-1x-with-marvin/2011-04-21 https://www.lanmaster53.com/blog/2011/02/28/creating-complex-password-lists-with-john-the-ripper/2011-02-28 https://www.lanmaster53.com/blog/2010/09/23/espn-fantasy-football-the-complete-attack/2010-09-23 https://www.lanmaster53.com/blog/2010/08/02/hacking-the-defcon-18-badge/2010-08-02 https://www.lanmaster53.com/blog/2010/04/16/no-nmap-no-permissions-no-problem/2010-04-16