Cybersecurity
Blogs

Hijacking Accounts the Silent Way: A Deep Dive into Password Reset Poisoning

Every modern app has a “Forgot Password” button—it’s something we take for granted. But what if that simple feature became the weak link that lets someone walk… Read More

When Permissions Go Too Far: Understanding Privilege Escalation in AWS

While working in cloud security, one thing to be learnt is this: IAM misconfigurations are more common than you’d think… Read More

Code Review : CAPTCHA Bypass

CAPTCHA, short for Completely Automated Public Turing test to tell Computers and Humans Apart, is a security feature designed to… Read More

Navigating the Bypass of 2FA Security

In today’s cybersecurity landscape, 2FA (Two-Factor Authentication) adds an essential layer of security for online… Read More

Approach towards Android Penetration Testing

Mobile penetration testing involves enhancing the security of the android device application by… Read More

Email Verification Bypass: A Rare Vulnerability

Authentication mechanisms form the backbone of secure web applications, ensuring that users accessing the… Read More

Enhancing Web Security with Burp Suite Extensions

Web application security testing often comes with its share of challenges. Despite the power of tools like Burp Suite. Read more

Bounty in the Code: Hunting Secrets in JavaScript​

JavaScript stands as a cornerstone of modern programming languages, known for its versatility, flexibility, and ease of use. Read more

SSH Library Compromised: Malicious Backdoor Discovered

On March 29th, it was reported that malicious code enabling unauthorized remote SSH access has been detected within……

Fortifying Web Applications: A Hands-On Analysis of Mass Assignment Vulnerabilities

JavaScript stands as a cornerstone of modern programming languages, known for its versatility, flexibility, and ease of use. Read more

Unveiling the Dark Side of Price Manipulation in E-Commerce

As online transactions continues to rise, it becomes obvious that ensuring payment security is of utmost importance…..

Securing GitLab: Critical Vulnerability Mitigated with Latest Release

A Critical user account takeover vulnerability has been discovered in Gitlab (CVE-2023-7028) which can be easily exploited by attackers to reset…..

Unleashing Chaos – The Atlassian Confluence RCE Vulnerability Saga

Atlassian recently announced a critical Remote Code Execution (RCE) vulnerability in Confluence Data Center and….

WAF Bypass SSRF: A Unique Way of Reading Internal Files.

In the 2021 OWASP Top Ten, SSRF was introduced as a new category, this indicates its rising significance in the threat landscape. A 2019 Data Breach Investigations Report