The PCI Security Standards Commission (PCI SSC) and the Cloud Security Coalition (CSA) have published a joint bulletin board to emphasize the importance of a well-range cloud environment. Why Cloud Computing Is Important? The use of cloud computing services has accelerated in the last few years and is expected to continue to grow. Given the […]
Hello Everyone, Hope you are doing well… Today we will discuss about .onion links. What is .onion Sites? Any website that is part of the Tor network has a URL that ends in .onion and can only be accessed using Tor. Your regular browser won’t be able to view these websites. .onion URLs usually look different […]
Hello Everyone, Hope you are doing well. Today we will discuss about SQL injection vulnerability allowing login bypass. What is SQL Injection? SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. It generally allows an attacker to view data that they […]
Hey Guys, Today we are going to discuss the OT PROTOCOLS In our ICS/SCADA series of Blogs. According to Purdue Model, We have Level 0, Level 1, Level 2, Level 3, Level 4, Level 5. Various Protocols works at various levels of OT Network over the Purdue Model. Protocols Used in Level 4 and 5: […]
Hello Everyone,Today we are going to continue from where we left in last Blog in our Series of ICS/SCADA Blogs. We have three Levels here to Discuss Level 2, Level 1 and 0 in Purdue Model. LEVEL 2 PROTOCOLS: 6LoWPAN: IPv6 over Low Power Personal Area Networks(6LoWPAN) is an Internet Protocol used for communication between […]
Hello Everyone, Hope you are doing well… Today we will discuss about Clickjacking with form input data prefilled from a URL parameter What is Clickjacking? Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element. This can cause users to unwittingly download malware, visit […]
The Main Reason of Complying to Compliances and Standards are to 1) Ensure Confidentiality, Integrity and Availability of the Data they create, transmit, receive and maintain2) To protect against threats and integrity violations3) Usage Policy and Disclosures standards4) Ensuring Their Workforce will comply with their Security policies and procedures. Here we are going to discuss […]
Hello Everyone,Hope Everyone is safe and secure. Today we are going to discuss about SSL Stripping. What is SSL STRIPPING?SSL Stripping is one of the type of Man In The Middle(MITM) Attack. Attacker will try to strip down your Secure socket Layer connection into Normal HTTP Connection. Impact :He can see your Traffic in Plain […]
Background concept of CORS. Cross-origin resource sharing (CORS) is a mechanism that allows using resources from any other domain. So, CORS introduced to eliminate some restrictions imposed by the SOP which block requests from accessing data on a Web Application unless it comes from the same origin. In simple words, Imaging the bing.com wants to […]
Welcome back guys to another blog in the pentesting series. Today we will explore about email pentesting and various ways to perform a VAPT on them. We will also discuss about various associated protocols and tools involved and at the end give you a checklist to follow while performing a test on email. How email […]
