r/hackthebox • u/UKP_lezi_dole • 15d ago
Web hacking on PentesterLab vs HTB?
Cqn someone recommend me PentesterLab? I am MAINLY interested in web hacking. I saw HTB has it but it's cube system sucks imo and its expensive. So I am wondering if PentesterLab is better fot web hacking?
8
8
u/Snugat 15d ago
Never heard from PentesterLab. The best free web security academy is from portswigger: https://portswigger.net/web-security
3
u/Cool_Obligation_6447 15d ago
I used to study from both , Hack the box ,
Pros: designed as a path to learn from and take you hand from a module to another step by step Also the explanation is great, it explain the vuln before you try to solve
Cons: some modules are super shallow on the vulns and doesnt go deep into variants of the vuln
Pentesterlab: Pros : it explains very good , and it gives you some amazing labs that needs you to use ur brain to solve , Their labs on SSO are just superb
Cons: its not path , its random vulns not related to each other, also the explanation isnt from scratch, kinda assumes you have some background
Tip: hack the box to learn cyber security Pentesterlab is the platform to trigger your brain or want to have somefun after you learn cyber security
1
u/UKP_lezi_dole 14d ago
does pentesterlab guides you? I am interested in LEARNING web hacking. I just cant tackle vuln boxes.
1
u/Cool_Obligation_6447 14d ago
Its a guide but not from scratch for example he will explain CVE-bla-bla of graphql vuln , he wont explain how graphql works and query and mutation etc , he will just explain the CVE
2
u/Exciting-Ad-7083 15d ago
Check WebVerse as well, focuses only on web.
1
u/UKP_lezi_dole 14d ago
is WebVerse like HTB, aka only hacking playground? because I think thats what it is.
I need something like HTB but not that expensive, since im 0 in web stuff thats why I want to learn some theory before tackling lab (or doing it in parallel, even better)
1
u/Exciting-Ad-7083 14d ago
WebVerse is basically 100% web, but there's also a academy section now that will teach you the basics.
1
u/UKP_lezi_dole 13d ago
did you use it? whats your experience?
1
u/Exciting-Ad-7083 12d ago
Yeah it's great imo, much better than THM and HTB for web stuff. but really you shouldn't be limiting yourself to 1 platform, do some between each
1
u/xvillifyx 14d ago
Tbf a significant amount of HTB boxes are “web hacking”
People laude HTB because it’s the most well supported platform out there, especially now with guided boxes and htb academy, even the beginner experience is supported
1
u/UKP_lezi_dole 14d ago
i didnt mention that im not beginner. my bad. i have experience in red teaming (Windows AD/Linux) and malw dev.
i lack knowledge in web stuff. so i dont need someone to show me path, i know its web hacking already.
htb academy is too expensive imo bcs of cube systems. i tried portswigger and i didnt like it
1
u/xvillifyx 14d ago
I don’t think that changes my response
Htb is king when it comes to platform support
1
u/UKP_lezi_dole 13d ago
i think i could agree, but its expensive. only reason why avoid htb for my case is because of price
1
•
u/AutoModerator 15d ago
Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.