https://kevinsec.io/tags/beginner/Recent content in Beginner on KevinSecHugoen-usWed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/burp-suite-beginner-workflow-for-web-pentest/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/burp-suite-beginner-workflow-for-web-pentest/A practical beginner workflow for using Burp Suite during web pentesting, from proxy setup to Repeater, Intruder, notes, and reporting evidence.https://kevinsec.io/blog/how-to-recognize-a-suspicious-email/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/how-to-recognize-a-suspicious-email/A practical checklist for identifying suspicious emails, links, attachments, sender inconsistencies, and business process red flags.https://kevinsec.io/blog/password-reset-vulnerabilities-common-patterns/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/password-reset-vulnerabilities-common-patterns/A practical guide to common password reset vulnerabilities, how they appear in real applications, and how to test them safely.https://kevinsec.io/blog/path-traversal-and-lfi-reading-files-you-should-not-read/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/path-traversal-and-lfi-reading-files-you-should-not-read/A practical introduction to path traversal and local file inclusion from a web pentesting perspective, with safe testing guidance and remediation patterns.https://kevinsec.io/blog/phishing-awareness-how-attackers-abuse-trust/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/phishing-awareness-how-attackers-abuse-trust/A beginner-friendly explanation of phishing awareness, focused on how attackers exploit trust, urgency, authority, and routine behavior.https://kevinsec.io/blog/reflected-xss-explained-context-root-cause-impact/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/reflected-xss-explained-context-root-cause-impact/A beginner-friendly explanation of reflected cross-site scripting from context to root cause, impact, testing, and remediation.https://kevinsec.io/blog/sql-injection-lab-from-error-message-to-root-cause/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/sql-injection-lab-from-error-message-to-root-cause/A safe lab-style walkthrough showing how to reason from a SQL error message to the root cause of SQL injection.https://kevinsec.io/blog/sql-injection-what-actually-happens-behind-the-query/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/sql-injection-what-actually-happens-behind-the-query/A beginner-friendly explanation of SQL injection from the perspective of query construction, untrusted data, and database interaction.https://kevinsec.io/blog/stored-xss-vs-reflected-xss-practical-differences/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/stored-xss-vs-reflected-xss-practical-differences/A practical comparison of stored XSS and reflected XSS, including root cause, exploitability, impact, detection, and remediation.https://kevinsec.io/blog/how-to-read-an-http-request-like-a-pentester/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/how-to-read-an-http-request-like-a-pentester/A beginner-friendly guide to reading HTTP requests from a web pentesting perspective.https://kevinsec.io/blog/idor-explained-with-a-simple-lab-scenario/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/idor-explained-with-a-simple-lab-scenario/A beginner-friendly explanation of IDOR using a safe lab scenario.https://kevinsec.io/blog/owasp-top-10-2025-explained-for-beginners/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/owasp-top-10-2025-explained-for-beginners/A beginner-friendly explanation of the OWASP Top 10 2025 web application security risks.https://kevinsec.io/blog/untrusted-data-root-of-most-web-vulnerabilities/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/untrusted-data-root-of-most-web-vulnerabilities/Understand why untrusted data is one of the most important concepts in web application security.