Log4j – A Billion Device Vulnerability
Could you imagine that something very dangerous has been present in billions of devices since 2013 that can potentially take over more […]
Category: Web Application Security
Ultimate Guide To SQL Injection – Part I
Cybersecurity expert and hacker Jeff Forristal initially described the SQL injection attack in 1998. It has been more than two decades since […]
Authentication and Authorization
As you recursively visit your local bank, there is a possibility that the bankers will recognize you by looking at you. Yes, […]
Insecure Direct Object Reference (IDOR)
Insecure Direct Object Reference (IDOR) was listed in the OWASP (Open Web Application Security Project) Top 10 back in 2007 and currently […]
Oauth A Feature To Vulnerability
Introduction There have been a huge increase in the number of web services in recent years, and these services must collaborate. You […]
Dependency Confusion – A Supply Chain Attack
Dependency confusion is a vulnerability which gained popularity in 2021 when Alex Birsan discovered it. It is one of the most impactful […]
HTTP REQUEST SMUGGLING PART-2
Welcome to the part 2 of exciting HTTP Request Smuggling vulnerability ! In case, you have missed part 1 then here’s link […]
Basics Of HTTP Request Smuggling
HTTP request smuggling is old but very interesting vulnerability. In 2019 it was reborn by James Kettle. And from that time, HTTP […]
XML External Entity (XXE) : The Ultimate Guide
In the world of web development, the Extensible Markup Language (XML) plays a pivotal role, and it is useful to those who […]
Understanding and Identifying Insecure Deserialization
Web applications are becoming a foundation requirement for any organization as the world moves toward digitization. It is often necessary to send […]
