SSL/TLS attacks: Part 2 – CRIME Attack
Compression Ratio Info-leak Made Easy (CRIME) attack: In the previous section we saw how the Chosen Plain-text attack was used […]
Category: Hacks
SSL/TLS attacks: Part 1 – BEAST Attack
Recently there has been a lot of news about a new SSL/TLS based attacks which was demonstrated in this year’s […]
LinkedIn Authorization Bypass Vulnerability To Send Messages
Overview: In this following test, I wanted to see whether I was able to view personal details of some other […]
Critical Joomla File Upload Vulnerability
I was reading the Joomla Update, http://developer.joomla.org/security/news/563-20130801-core-unauthorised-uploads A bug in Joomla Core and having the criticality is always awesome to […]
Distributed Denial-of-Service(DDoS) Attacks – Know Thy Enemy
What is a DDoS based attack? A Distributed Denial-of-Service attack (DDoS attack) is an attempt to make a machine or […]
File Fuzzing Using Minifuzz
What is Fuzzing? Fuzz testing is a testing technique that provides malicious input to the application. Fuzz testing is crashes, […]
Identifying Security Flaws With Code Analysis Tool (CAT.NET)
Code Analysis Tool (CAT.NET) is a binary source code analysis tool that helps in identifying common security flaws in managed […]
Authorization Bypass on LinkedIn
Summary: LinkedIn has a feature called Project wherein you can add project members from your connections. We were able to […]
CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Fundamentals Hacks Malware Analysis Penetration Testing Research Security Testing SOC Analysts Social Engineering Tools
Malware Development – Welcome to the Dark Side: Part 1
If you are in cybersecurity, especially Red Teaming, writing a full-undetectable (FUD) malware is a great skill to have. Folks […]
Injection in ‘Export to Spreadsheet’ functionality
Comma separated vulnerability also known as Formula Injection/csv injection. Introduction: This document demonstrates the CSV injection a technique for exploiting […]