Tor, short for “The Onion Router,” is a free and open-source software project aimed at enabling anonymous communication. It directs Internet traffic through a worldwide volunteer overlay network consisting of thousands of relays to conceal a user’s location and usage from anyone conducting network surveillance or traffic analysis. The name “onion routing” refers to the […]
What is Cross- site scripting? Cross- Site Scripting is a type of vulnerability commonly found in web applications. In XSS attacks, a malicious actor injects malicious scripts, typically JavaScript, into web pages By client- side. These scripts can then execute in the context of the victim’s browser, allowing the attacker to steal session tokens, logs […]
Offensive Security offers free lab machines under their Proving Grounds library that I find super helpful to prepare for the OSCP. I will be walking you through my experience with an “easy” level machine called FunboxRookie. START THE LAB :- 1. Open lab and take the ip 2. Scanning the ip using nmap […]
Introduction :- APIs allow different software systems to communicate and exchange data. Testing APIs is crucial because weaknesses in APIs can compromise a website’s security. Dynamic websites use APIs, so common web security issues like SQL injection can also apply to API testing. In this guide, we’ll focus on testing APIs that may not be […]
When it comes to web security, there are numerous vulnerabilities that can put users and websites at risk. One such vulnerability is Server-Side Template Injection (SSTI). In this post, we’ll break down what SSTI is, what is Templates, Types of template engines, how it works, Lab practical example and how to protect your site from […]
Introduction Cybersecurity threats continue to evolve, and one of the often-overlooked vulnerabilities is username enumeration. This technique allows attackers to determine valid usernames on a system or website, increasing the risk of brute-force attacks, credential stuffing, and unauthorized access. This blog will explain what username enumeration is, how attackers exploit it. What is Username Enumeration? […]
Introduction Metasploit is a fantastic tool, whether it is out in the field or through learning the ropes of exploitation. Its streamlined process of well-known exploitation methods eases the burden of pentesters, cutting exploitation from 30-minute affairs to five minutes. However, in doing so many beginners who overly rely upon Metasploit lose critical foundational skills […]
You would have heard or seen these terms definitely with the term vulnerability .Today we will take a look at these terms and discuss about them . These are terms related to vulnerability analysis. Lets begin- 1. CVE (Common Vulnerabilities and Exposure): Security professionals use these to record and share information about known vulnerabilities. Vulnerabilities […]
A Major Victory in the Fight Against Terrorism: Rana’s Extradition and the Imperative of Security Awareness. The US Supreme Court has ordered the extradition of Tahawwur Rana, convicted in connection with the Mumbai terror attacks, to India. Rana, linked to the 2008 Mumbai attacks, has exhausted US legal options and will now face justice in […]
What is Sniffing? Sniffing refers to the process of intercepting and capturing network traffic, often used by attackers to eavesdrop on sensitive data such as usernames, passwords, and confidential communications Sniffers can be either hardware or software installed on the system, and by setting one up on a network in promiscuous mode, a malicious intruder […]
