What is Docker? Docker is an open-source platform for building and running applications in a container that acts as a lightweight virtual machine. Terminologies: Docker Container: Containers are designed to run isolated from other processes so they only take up the resources they require. This means that containers don’t interfere with each other or the […]
In order to protect your Docker images, it’s important to understand some basics of how Docker image vulnerability assessment work. Here are some tips that will help you better manage your containers so they’re not easily hijacked by malicious actors. We should know the basics of container vulnerabilities. Some of the most common vulnerabilities in […]
In the previous blog we discussed “Abusing the Docker API” and today we will learn about Docker Privilege Escalation. We will learn how to escalate the privileges of the root shell if the docker is running on the host’s system.. Every Docker environment has a set of inherent security limitations. For example, sudo on Linux […]
In this blog, we will learn How can we abuse the Docker API after enabling the Docker API for Remote Connection. But, first of all, we will learn about Docker client-server Architecture. So that we can have a basic understanding of Docker API, Docker CLI, and Docker daemon Docker daemon The brain behind all operations […]
In this blog post we would like to introduce the pentesting framework for docker. The pentesting framework is used as a development and testing tool. For pentesting, the docker container image can be installed on a system such as our Ubuntu with root access or included in another container. In this blog post we will […]
What is Cryptojacking? Script Jacking or Cryptojacking is malicious crypto mining that occurs when cybercriminals install hacking software on both work and personal computers, laptops, and mobile devices. The software uses your computer’s abilities and resources to mine cryptocurrencies and steals crypto wallets owned by unsuspecting victims. Code deployment is simple, runs in the background and is […]
Hello Everyone, Hope you are doing well. Today we will discuss about SQL injection vulnerability allowing login bypass. What is SQL Injection? SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. It generally allows an attacker to view data that they […]
Hey Guys, Today we are going to discuss the OT PROTOCOLS In our ICS/SCADA series of Blogs. According to Purdue Model, We have Level 0, Level 1, Level 2, Level 3, Level 4, Level 5. Various Protocols works at various levels of OT Network over the Purdue Model. Protocols Used in Level 4 and 5: […]
Hello Everyone,Today we are going to continue from where we left in last Blog in our Series of ICS/SCADA Blogs. We have three Levels here to Discuss Level 2, Level 1 and 0 in Purdue Model. LEVEL 2 PROTOCOLS: 6LoWPAN: IPv6 over Low Power Personal Area Networks(6LoWPAN) is an Internet Protocol used for communication between […]
Hello Everyone, Hope you are doing well… Today we will discuss about Clickjacking with form input data prefilled from a URL parameter What is Clickjacking? Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element. This can cause users to unwittingly download malware, visit […]
