https://kevinsec.io/tags/web-pentest/Recent content in Web Pentest on KevinSecHugoen-usWed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/burp-suite-beginner-workflow-for-web-pentest/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/burp-suite-beginner-workflow-for-web-pentest/A practical beginner workflow for using Burp Suite during web pentesting, from proxy setup to Repeater, Intruder, notes, and reporting evidence.https://kevinsec.io/blog/legal-recon-for-web-pentesting/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/legal-recon-for-web-pentesting/A practical guide to performing legal, scope-aware reconnaissance before a web pentest, without crossing authorization boundaries.https://kevinsec.io/blog/lessons-learned-from-a-web-pentest-engagement/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/lessons-learned-from-a-web-pentest-engagement/Practical lessons from web pentest engagements: scope discipline, recon quality, business logic testing, evidence, reporting, and remediation clarity.https://kevinsec.io/blog/manual-testing-vs-automated-scanning/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/manual-testing-vs-automated-scanning/A practical comparison of manual web security testing and automated scanning, including when to use each and why both matter.https://kevinsec.io/blog/authentication-testing-checklist-for-web-applications/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/authentication-testing-checklist-for-web-applications/A practical authentication testing checklist for web applications.https://kevinsec.io/blog/how-to-read-an-http-request-like-a-pentester/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/how-to-read-an-http-request-like-a-pentester/A beginner-friendly guide to reading HTTP requests from a web pentesting perspective.https://kevinsec.io/blog/idor-explained-with-a-simple-lab-scenario/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/idor-explained-with-a-simple-lab-scenario/A beginner-friendly explanation of IDOR using a safe lab scenario.