Hey everyone , BePractical-Web have just launched another course!

Topic : Build Your Own Automatic Image Downloader with PHP - 2023

Grab this course for absolutely free by visiting the URL below:

Coupon Link : https://www.udemy.com/course/build-your-own-automatic-image-downloader-with-php-2023/?couponCode=FEB_SALE

Enroll in this course and lift up your PHP skills to the next level ✌️

Subscribe to BePractical-Web YouTube channel for more web development content

https://youtube.com/@bepractical_web

Hi everyone! Learn how to use bash noscripting to automate subdomain enumeration

Video Link: https://youtu.be/DbM292SYwM4

Hi everyone, Hope you all are doing well. We are very grateful to you guys for helping us in reaching the 4K Subscribers on YouTube. We promise to deliver best content in cybersecurity for our beloved BePractical community. Thank you again for showing the faith and belief in us.

And Remember: Be Awesome and Be Practical

Hi everyone! Learn how to do content discovery in an effective way

Video Link: https://youtu.be/_EnwPDor8JM

Hey guys, We've just become a community of 1k members. We can't thank you all enough for the love and support that we've got from you❤️

Hi everyone! Learn how to automate cross site noscripting using bash

Video Link: https://youtu.be/4sWkpYKoxCE

Increase your API Security Skills for free

Check out: https://university.apisec.ai/

Hi everyone! Learn how to use amass to its full potential

Video Link: https://youtu.be/DbjVL-bqfl4

Hi everyone! I have just created a new video on "finding root domains" using amass.

Check it out: https://www.youtube.com/watch?v=rP7dcYRATnY

Hi everyone! Learn about the top tools for port scanning

Article Link: https://bepractical.tech/top-tools-for-port-scanning/

Hi everyone! Learn how to find endpoints of a web application

Video Link: https://youtu.be/nNF7RjorobU

Identify the vulnerability!

I've recently found a vulnerability that was using similar code in the back-end

The correct answer is: ClickJacking

Hi everyone! Learn how to use amass to brute force subdomain

Video Link: https://youtu.be/jvp4bueAxvs

Hi everyone! Learn how to find subdomain through brute forcing method

Video Link: https://youtu.be/JmMXab-Us2c

Which one do you think is vulnerable?

The correct answer is: The Left one is vulnerable to CSRF and the right one is secure because it is using PUT method which checks for the CORS policy.