+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Question (/Thread-Question--81800)
Question - meow - 07-24-2016
Is there any way to get better at black box testing other than targeting random things and/or doing bug bounties?
RE: Question - I am Cynical - 07-25-2016
Assuming you're talking about examining the desired applications functionality. Not to good with all these modern terms, heh. Couple of years ago I read up about orthogonal arrays, decision tables and pairwise testing. In my sense of experience it haven't really been useful other than checking simpler software applications. However, there are tons of different techniques and methods used to test software functionality. Essentially, it's about meeting the requirements needed and then performing different actions to see if the requirements are met and works as expected. The hard part is to figure out how the application operates and move on from there.
I doubt anyone here can tell you anything else than keep rolling, since you'll develop more experience when time passes. Studying different output conditions when feeding it with different inputs is a great wat to start. Setting up virtual labs may help getting started.
Edit welp, didn't see this was the website application section.
RE: Question - Dong - 07-25-2016
(07-24-2016, 12:39 AM)meow Wrote: Is there any way to get better at black box testing other than targeting random things and/or doing bug bounties?
I'm not good or anything, since I recently started trying to delve further into web pentesting... However, I'd definitely recommend reading other hackers' reports. I've learned a ton recently just by doing that. Check this out if you haven't already: http://h1.nobbd.de/. It's a disclosure timeline for HackerOne.
RE: Question - meow - 07-27-2016
(07-25-2016, 09:42 PM)Dong Wrote:(07-24-2016, 12:39 AM)meow Wrote: Is there any way to get better at black box testing other than targeting random things and/or doing bug bounties?
I'm not good or anything, since I recently started trying to delve further into web pentesting... However, I'd definitely recommend reading other hackers' reports. I've learned a ton recently just by doing that. Check this out if you haven't already: http://h1.nobbd.de/. It's a disclosure timeline for HackerOne.
Nice, at least someone replied (the guy above you did but he didn't know what I was talking about). This is SL so it's not like I expected much.
RE: Question - Dong - 07-27-2016
(07-27-2016, 02:30 AM)meow Wrote:(07-25-2016, 09:42 PM)Dong Wrote:(07-24-2016, 12:39 AM)meow Wrote: Is there any way to get better at black box testing other than targeting random things and/or doing bug bounties?
I'm not good or anything, since I recently started trying to delve further into web pentesting... However, I'd definitely recommend reading other hackers' reports. I've learned a ton recently just by doing that. Check this out if you haven't already: http://h1.nobbd.de/. It's a disclosure timeline for HackerOne.
Nice, at least someone replied (the guy above you did but he didn't know what I was talking about). This is SL so it's not like I expected much.
Lol, hopefully we can get some infosec related discussion started here again.