Access Control Vulnerabilities
This blog aims to understand and demonstrate different access control vulnerabilities. The flow here will start with the theoretical explanation of what access control is…
How to Simplify Security with Cybersecurity Mesh Architecture (CSMA)?
Due to the trend of digital acceleration and different workforce options (hybrid and work from anywhere), and the fact that so many employees are now…
Exploit Kits: Attackers Preferred Exploitation Tools
Exploit Kits: Overview Cybercrime was once the domain of a tiny handful of people with excellent technical skills who leveraged their abilities for malicious acts….
Using SecLists for Penetration Testing
Introduction to SecLists Seclists is something that comes very handy to a pen tester. The simple reason is, it has a collection of all the…
Application Security: Risks and Best Practices
Applications play a crucial role in our lives as we use them for various useful purposes, ranging from shopping, interacting with people, managing finances, etc….
Security Threat Intelligence Standards – STIX and TAXII
Introduction: Security Threat Intelligence Standards (STIX and TAXII) make day-to-day SOC operations go uninterrupted with a shared strategy that provides a collaborative response to cybersecurity…
Code Injection Vulnerabilities
Introduction to Code Injection Vulnerabilities Code injection is an attack where the attacker tries to inject a code that can be interpreted and executed by…
Web Cache Poisoning DoS Attack
The Web Cache Poisoning DoS Attack, also known as CPDoS. It is a type of DoS attack that primarily relies on the webserver’s cache mechanism….
NoSQL Injection Vulnerability
In this blog, we will be discussing the NoSQL Injection Vulnerability and its exploitations scenarios. Before getting into the details of NoSQL injections, let us…
Hibernate Query Language (HQL) Injection
HQL is the abbreviation for Hibernate Query Language. Hibernate can be classified as ORM or Object-Relational Mapping. It maps class definitions with similar SQL tables that…