Hello Greeting Everyone ! Today in this Blog We will Explore How OAuth implicit flow Authentication schema Vulnerable if it not properly configured . In This Blog we will Discuss Common attacks flow on 0auth , how 0auth work . Before We start What is 0auth ? OAuth is an open-standard authorization protocol orframework that […]
Greeting Everyone ! Hope Everything Is Going Well And Good Today in this blog we will explore XXE attack Which Is Critical Vulnerability Found on Web Application . We Will Explore In Details What is XXE , How Successfully Perform XXE Attack against Your Target Application . What is XXE Attack ? XXE Attack Which […]
Greeting Everyone! Today In This Blog we will Explore Another XSS Victor Which Is Possible through SVG file Upload Functionality Due To Improper Validation Of file it got Executed to Our Backend Server. As You guys Know about What is XSS We have already discussed Previously about Different XSS Attack Previous Blog. Today In […]
Greeting Everyone ! Hope Everything Is Going Well Today In This Blog We Will Explore Common Security Issue Which related To Weak Session Implementation Comes Under Session management Which Contain Different Attack Scenario Such As Session Related issue , Improper Validation Of Session Time Out , Session Not Implement Properly etc. Which Carries Critical Impact […]
Greeting Everyone ! Hope Everything Is Going Well Today In This Blog We Will Explore About 5 Common Extension Which Help You to verify Issue While Your Testing Against issue Related to deserialization. Deserialization is the reverse of that process, taking data structured from some format, and rebuilding it into an object. Today, the most […]
So, today we are going to show you can solve the Capture the Flag (CTF) My File Server 1, Vulnhub.com is a kind of which provides users with vulnerable applications/machines for there practice who has a experience in the field of information security. You can check our previous articles for more CTF challenges. Please note: […]
The Main Reason of Complying to Compliances and Standards are to 1) Ensure Confidentiality, Integrity and Availability of the Data they create, transmit, receive and maintain2) To protect against threats and integrity violations3) Usage Policy and Disclosures standards4) Ensuring Their Workforce will comply with their Security policies and procedures. Here we are going to discuss […]
Hello Everyone,Hope Everyone is safe and secure. Today we are going to discuss about SSL Stripping. What is SSL STRIPPING?SSL Stripping is one of the type of Man In The Middle(MITM) Attack. Attacker will try to strip down your Secure socket Layer connection into Normal HTTP Connection. Impact :He can see your Traffic in Plain […]
Background concept of CORS. Cross-origin resource sharing (CORS) is a mechanism that allows using resources from any other domain. So, CORS introduced to eliminate some restrictions imposed by the SOP which block requests from accessing data on a Web Application unless it comes from the same origin. In simple words, Imaging the bing.com wants to […]
Welcome back guys to another blog in the pentesting series. Today we will explore about email pentesting and various ways to perform a VAPT on them. We will also discuss about various associated protocols and tools involved and at the end give you a checklist to follow while performing a test on email. How email […]
