OWASP vulnerable applications are web apps that are broken on purpose so you can legally practice finding and fixing real security flaws. The best starting points are OWASP Juice Shop, WebGoat, Mutillidae and Security Shepherd. Run them locally in containers, never expose them to the internet and work through the OWASP Top 10 one category at a time.
Nobody learns web security by reading alone....
Most companies know their main website. Fewer can list every subdomain that hangs off it. A staging server from a project that ended two years ago, a test login page, a marketing microsite built for one campaign: these hosts are easy to forget and easy for an attacker to find. If you want to find hidden subdomains before someone else does, you need a repeatable process and the right tools.A...
GraphQL penetration testing follows six phases: scoping and reconnaissance, schema discovery, authentication and session testing, authorization testing at object, field and function level, abuse case testing for batching, aliases and nested queries and injection plus reporting. The distinguishing feature is that the tester works from the schema outward. Instead of crawling URLs, you enumerate...