SWT Community
Ask questions, share knowledge, post writeups, and connect with fellow cybersecurity enthusiasts.
8
Total Posts
3
Questions
2
Writeups
3
Solved
41
votes
5
answers
1250
views
How to prevent SQL Injection in Node.js Express applications?
I'm building a REST API with Express.js and PostgreSQL. I'm using raw SQL queries with `pg` driver. What are the best practices to prevent SQL injection attacks? Here's my current...
86
votes
12
replies
3400
views
What tools do you use for bug bounty hunting in 2026?
I've been doing bug bounty for about 6 months now and I'm looking to expand my toolkit. Currently I'm using: - **Recon**: subfinder, httpx, nuclei - **Scanning**: Burp Suite Commu...
154
votes
8
replies
5200
views
HTB Cyber Apocalypse 2026 — Web Challenge Writeup: JWT Forgery
# HTB Cyber Apocalypse 2026 — JWT Forgery ## Challenge Info - **Category**: Web - **Difficulty**: Medium - **Points**: 325 ## Overview The challenge presented a web application w...
31
votes
7
answers
890
views
Best OSINT techniques for email address investigation?
I'm researching OSINT techniques specifically for investigating email addresses in phishing cases. I know about basic tools like Hunter.io and Have I Been Pwned, but what other tec...
62
votes
15
replies
2800
views
Is CEH certification still worth it in 2026?
I've seen a lot of debate about whether the CEH (Certified Ethical Hacker) certification is still relevant. With newer certifications like OSCP, eJPT, and PNPT available, is CEH st...
199
votes
11
replies
7100
views
Exploiting Race Conditions in Web Applications — A Practical Guide
# Race Conditions in Web Applications ## What is a Race Condition? A race condition occurs when multiple threads or processes access shared resources simultaneously, leading to un...
54
votes
9
answers
1750
views
How to set up a home lab for network penetration testing?
I want to set up a home lab for practicing network penetration testing. I have an old laptop with 16GB RAM and an i7 processor. What VMs and network configurations do you recommen...
92
votes
18
replies
4200
views
Cloud Security vs Traditional Network Security — Career Path Discussion
With the rapid shift to cloud infrastructure, I'm wondering which career path has more long-term potential: 1. **Cloud Security** (AWS/Azure/GCP security, container security, serv...