5 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.
Gavin Johnson-Lynn, an offensive security specialist and developer, writes practical application security articles with code walkthroughs and conceptual essays. A reader gets hands-on ASP.NET Core security tips, career advice for entering ethical hacking, and security design ideas such as Zero Data and Resource Trust.
Step-by-step walkthroughs of PortSwigger Web Security Academy labs, covering file upload and DOM-based XSS vulnerabilities. Each issue explains the lab's setup, the vulnerability, and the solution so readers can work through the exercises themselves.
RJ Sudlow's blog publishes step-by-step write-ups of penetration testing machines from Hack the Box and OSCP Proving Grounds, covering enumeration, foothold and privilege escalation. Readers get practical walkthroughs with the actual nmap, gobuster and exploit output shown alongside the reasoning.
Cybernotes publishes step-by-step walkthroughs of TryHackMe rooms, showing the Nmap, FTP, and Gobuster commands and their output for each target. Readers get a practical, follow-along guide to basic penetration testing, though the posts mostly reproduce tool output and platform material.
Ethical Erik publishes practical notes on penetration testing, bug bounty and ethical hacking, including a personal project for finding secrets in JavaScript. Issues also cover internal versus external pentest methodology and msfvenom payload cheat sheets for security practitioners.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
