PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HTB CBBH Review - A Penetration Tester's Perspective

projectblack.io | research | #pentesting | #certification | #web-security | #career | #hackthebox | #cbbh
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A penetration tester reviews HackTheBox's CBBH certification, arguing its web-focused, depth-first curriculum still translates well to professional pentesting — and notes the upcoming rename to CWES.
Published
Collected

Related coverage

blog · netspi.com
Q&A with Tyler Sullivan: The Journey to CREST Certification
NetSPI consultant Tyler Sullivan recounts his path to CREST certification, from CPSA and CRT exams to CCT, explaining why the respected accreditation strengthens client trust across EMEA.
research · portswigger.net
So you want to be a web security researcher?
James Kettle shares guidance on becoming a web security researcher: mastering the state of the art, breaking into the industry, bug bounty paths and recommended resources.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
research · vercel.com
Security boundaries in agentic architectures
A framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret injection to full application sandboxing.
research · slcyber.io
Hacking on Bug Bounties for Four Years
Four years of bug bounty hunting: lessons, techniques, tooling evolution, and notable findings from 2016 to 2020.
blog · xbow.com
Grok 4.7 Is Different. So Is the Best Way to Use It.
XBOW tested Grok 4.7 on exploit crafting and agentic pentests: inside xAI's Build it improved substantially over 4.6, outside Build it slipped slightly—orchestration now matters as much as prompts.
Back