# Pentration Testing, Beginners To Expert! **URL:** \ **Category:** Tutorials & Methods\ **Tags:** hacking, tips-tricks\ **Created:** [September 10, 2024, 10:27pm UTC](https://onehack.st/t/pentration-testing-beginners-to-expert/291048 "2024-09-10T22:27:04Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\ **Post date:** [September 10, 2024, 10:27pm UTC](https://onehack.st/t/pentration-testing-beginners-to-expert/291048/1 "2024-09-10T22:27:04Z")
Pentration Testing, Beginners To Expert! > **Note** - Some of the links may become unavailable (returning a 404 error) in the future. If you come across any broken links, please help us by reporting them in the issue section or submitting a Pull Request to suggest a replacement. Content List: - Phase 1 – [History](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-1--history) - Phase 2 – [Web and Server Technology](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-2--web-and-server-technology) - Phase 3 – [Setting up the lab with BurpSuite and bWAPP](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-3--setting-up-the-lab-with-burpsuite-and-bwapp) - Phase 4 – [Mapping the application and attack surface](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-4--mapping-the-application-and-attack-surface) - Phase 5 – [Understanding and exploiting OWASP top 10 vulnerabilities](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-5--understanding-and-exploiting-owasp-top-10-vulnerabilities) - Phase 6 – [Session management testing](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-6--session-management-testing) - Phase 7 – [Bypassing client-side controls](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-7--bypassing-client-side-controls) - Phase 8 – [Attacking authentication/login](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-8--attacking-authenticationlogin) - Phase 9 - [Attacking access controls (IDOR, Priv esc, hidden files and directories)](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-9---attacking-access-controls-idor-priv-esc-hidden-files-and-directories) - Phase 10 – [Attacking Input validations (All injections, XSS and mics)](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-10--attacking-input-validations-all-injections-xss-and-mics) - Phase 11 – [Generating and testing error codes](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-11--generating-and-testing-error-codes) - Phase 12 – [Weak cryptography testing](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-12--weak-cryptography-testing) - Phase 13 – [Business logic vulnerability](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes#phase-13--business-logic-vulnerability) [Follow Repo Here](https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes) **Happy learning!** ---
**Author:** ![Bob.Smit](https://onehack.st/user_avatar/onehack.st/bob.smit/32/161700_2.png) [@Bob.Smit](https://onehack.st/u/Bob.Smit)\ **Post date:** [September 11, 2024, 7:34pm UTC](https://onehack.st/t/pentration-testing-beginners-to-expert/291048/2 "2024-09-11T19:34:37Z")
Good link. Thanks