[zn0]

I second fuzzing the site manually for vulnerabilities, it's a lot more quiet and you'll most likely have a lot more success compared to automated scanners. Sometimes I use tools after identifying a vulnerability to exploit it more easily though, like sqlmap. I'd suggest starting off with simple vulnerabilities like XSS or error-based SQL injections if you want to get into the basics of web-exploitation. OWASP is a great source of information too.

[sybylroot]

Nice approach.

It's also beneficial to manually exploit every now and then, without the aid of (automated) tools. This will significantly Improve your skill set over time.

I usually use a midway, i code part of my own exploits, and sometimes i improve some others exploits, i only use tools when i don't know where a point of the research (example in chain-servers) is going and when the job is just a fast thing (like flodding an stuff like that)

[xdlwilliamz]

Well you can even combine certain attack vectors to gain access and more stuff i depends of what you want to do, i usually use Linux with a VM of Windows (for studying the site) and Linux as my toolset, i use the distro BlackArch is like Kali but based on Arch distro it comes with a literally lot of tools..

Haven't heard of Blackarch before, gonna check it out ...

[mothered]

Haven't heard of Blackarch before, gonna check it out ...

I have It running on one VM, and It's quite Impressive.

You will not be disappointed.

[sybylroot]

Haven't heard of Blackarch before, gonna check it out ...

I most warn you, is huge (near to 24GB's but i have netinstall too so..depends of your bandwidth) good is that is Fast, you can use BackBox too, but i have not tested that last...

[mothered]

I most warn you, is huge near to 24GB's

The ISO file Is around 13 GB, from their official website.

[xdlwilliamz]

I most warn you, is huge near to 24GB's

The ISO file Is around 13 GB, from their official website.

i got scared when i heard 24gb, so why the large difference in size ?

[mothered]

I most warn you, is huge near to 24GB's

The ISO file Is around 13 GB, from their official website.

i got scared when i heard 24gb, so why the large difference in size ?

Its capacity Is due to what It's packaged with as a standard download.