>exitvillain_security

exitvillain is a growing network of ethical hackers collaborating on cybersecurity research, red teaming exercises, and security education. We’re not a traditional company—we're a tight-knit, community-driven initiative.

We're also proud to host a public forum for ethical hackers to collaborate, learn, and innovate.

MOBILE VERSION UNDER CONSTRUCTION. But you can still post! might want to Zoom in/out

exitvillain

Random Topic

March 16, 2025, 11:40 p.m.

ahh yeah the mobile version doesn't have shit. Burp suite academy is really good. i reccomend one of the youtubers that portswigger links to. z3nsh3ll, he explains it really well. And the portswigger labs are fantastic. Everyone raves about those ask around. Also building a shity web app like this helps you understand how certain web apps can work. I recommend building a couple start with Flask or something like this, do that and also do portswigger at the same time that way you can understand it from a builders perspective and a hackers perspective , that way one day you can really attack them.

Jim

Random Topic

March 16, 2025, 11:39 p.m.

Ahhh thats cool. Burp suit scares me lowkey lol too much going on.I was thinking about doing a few courses on burpsuit academy to get better with web app. I think after OSEP I will check into that more. On the mobile version I dont see PM

exitvillain

Random Topic

March 16, 2025, 11:35 p.m.

So i have decided to nail the BSCP, burp suite certified practitioner first. cause my burp suite pro expires in 3 months.

Jim

Random Topic

March 16, 2025, 11:31 p.m.

When you planning on taking CRTO?

exitvillain

Cyber Cert Corner

March 16, 2025, 11:26 p.m.

i have yet to implement delete posts lol sorry guys. just um make it blank for now if you want.

Jim

Random Topic

March 16, 2025, 2:06 p.m.

Thanks! Hopefully ill figure this out. I have two days left.

exitvillain

Cyber Cert Corner

March 14, 2025, 11:21 p.m.

watch the last couple of videos in the active directory section of the course. watch the case studies.

Jim

Random Topic

March 14, 2025, 2:20 p.m.

Can I get a hint? Im in.. looked through all files.

jairo

Random Topic

March 10, 2025, 7:17 a.m.

After detection of DOM-based/reflected XSS, the most important thing is executing the payload, which is quite different in the real world. We mostly need to create a customized payload for every case. For crafting the XSS payload, "brute logic" categorized it into 7 main cases, which is quite important to know while executing the XSS payload.

https://brutelogic.com.br/blog/the-7-main-xss-cases-everyone-should-know/

jairo

Random Topic

March 10, 2025, 7:16 a.m.

That's a fantastic insight! Many beginners overlook the difference between View Source and Inspect Element, but understanding it is crucial for finding DOM-based XSS. Your explanation is clear and to the point—definitely the kind of tip that can level up someone's XSS testing game! Looking forward to your video; it sounds like it'll be super valuable!