* Learn to code. If you can read and write code, it will boost your effectiveness in your role. * Read "The Art of software security assessment", "Network Security Assessment" and "Web Application Hackers handbook". They're quite old now but good content. * Participate in CTFs. * Play on practice platforms like HTB. * Work through Portswigger labs, its free and top quality…
……宝藏。* https://www.hackerone.com/ 还有什么比在实网目标上实战更好的学习方法呢？话虽如此，我还是建议先做做别的项目。……我很多知识都是靠读书学的，所以推荐几本书：* Chris McNab 写的《Network Security Assessment》。我手头是第二版，读起来很不错也很有指导意义，但确实挺过时了。* Peter Yaworski 写的《Real-World Bug Hunting》。Web 安全入门必读。写得不错，也相当实用。* 《Advanced…
…gold. * https://www.hackerone.com/ What better way to learn then practice on live targets? That being said, I would do some of the others first. ... I do a lot of learning through reading, so books: * Network Security Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced…
……宝藏。* https://www.hackerone.com/ 还有什么比在实网目标上实战更好的学习方法呢？话虽如此，我还是建议先做做别的项目。……我很多知识都是靠读书学的，所以推荐几本书：* Chris McNab 写的《Network Security Assessment》。我手头是第二版，读起来很不错也很有指导意义，但确实挺过时了。* Peter Yaworski 写的《Real-World Bug Hunting》。Web 安全入门必读。写得不错，也相当实用。* 《Advanced…
…gold. * https://www.hackerone.com/ What better way to learn then practice on live targets? That being said, I would do some of the others first. ... I do a lot of learning through reading, so books: * Network Security Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced…
……宝藏。* https://www.hackerone.com/ 还有什么比在实网目标上实战更好的学习方法呢？话虽如此，我还是建议先做做别的项目。……我很多知识都是靠读书学的，所以推荐几本书：* Chris McNab 写的《Network Security Assessment》。我手头是第二版，读起来很不错也很有指导意义，但确实挺过时了。* Peter Yaworski 写的《Real-World Bug Hunting》。Web 安全入门必读。写得不错，也相当实用。* 《Advanced…
…gold. * https://www.hackerone.com/ What better way to learn then practice on live targets? That being said, I would do some of the others first. ... I do a lot of learning through reading, so books: * Network Security Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced…
* 学写代码。如果你能读懂并且会写代码，这会大幅提升你在本职岗位上的效率。* 去读《The Art of Software Security Assessment》、《Network Security Assessment》和《Web Application Hacker's Handbook》。虽然这些书现在挺老了，但内容依旧过硬。* 多打 CTF。* 在 HTB 这类靶场平台上练手。* 刷完 PortSwigger 的靶场实验，免费且质量顶级……
* Learn to code. If you can read and write code, it will boost your effectiveness in your role. * Read "The Art of software security assessment", "Network Security Assessment" and "Web Application Hackers handbook". They're quite old now but good content. * Participate in CTFs. * Play on practice platforms like HTB. * Work through Portswigger labs, its free and top quality…
……宝藏。* https://www.hackerone.com/ 还有什么比在实网目标上实战更好的学习方法呢？话虽如此，我还是建议先做做别的项目。……我很多知识都是靠读书学的，所以推荐几本书：* Chris McNab 写的《Network Security Assessment》。我手头是第二版，读起来很不错也很有指导意义，但确实挺过时了。* Peter Yaworski 写的《Real-World Bug Hunting》。Web 安全入门必读。写得不错，也相当实用。* 《Advanced…
…gold. * https://www.hackerone.com/ What better way to learn then practice on live targets? That being said, I would do some of the others first. ... I do a lot of learning through reading, so books: * Network Security Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced…
……宝藏。* https://www.hackerone.com/ 还有什么比在实网目标上实战更好的学习方法呢？话虽如此，我还是建议先做做别的项目。……我很多知识都是靠读书学的，所以推荐几本书：* Chris McNab 写的《Network Security Assessment》。我手头是第二版，读起来很不错也很有指导意义，但确实挺过时了。* Peter Yaworski 写的《Real-World Bug Hunting》。Web 安全入门必读。写得不错，也相当实用。* 《Advanced…
…gold. * https://www.hackerone.com/ What better way to learn then practice on live targets? That being said, I would do some of the others first. ... I do a lot of learning through reading, so books: * Network Security Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced…
……宝藏。* https://www.hackerone.com/ 还有什么比在实网目标上实战更好的学习方法呢？话虽如此，我还是建议先做做别的项目。……我很多知识都是靠读书学的，所以推荐几本书：* Chris McNab 写的《Network Security Assessment》。我手头是第二版，读起来很不错也很有指导意义，但确实挺过时了。* Peter Yaworski 写的《Real-World Bug Hunting》。Web 安全入门必读。写得不错，也相当实用。* 《Advanced…
…gold. * https://www.hackerone.com/ What better way to learn then practice on live targets? That being said, I would do some of the others first. ... I do a lot of learning through reading, so books: * Network Security Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced…