LinkedIn Cross-Site-Scripting (XSS) & Content Spoofing Vulnerability
Couple of days back, I reported XSS and Content Spoofing on LinkedIn. Here are the details of the issues. Cross Site Scripting: […]
Category: Research
Owning The Enterprise With HTTP PUT
During a routine penetration testing engagement, we found an IIS webserver with HTTP methods (verbs) like PUT and DELETE enabled […]
Analysis of Malware: Detecting Behavior & Anti-Reversing Techniques
Scenario: One of our clients observed a suspicious behavior in a program and wanted us to analyze and identify if […]
Heartbleed Open SSL Bug FAQ & Advisory
Heartbleed Advisory & FAQ Please find below a quick FAQ on the Heartbleed vulnerability and what you can to address […]
Insecure Implementation of Guest Wireless Networks
Most large organizations provide wireless facilities for their guest, which may include vendors, consultants, business associates, employees from other regions […]
From SQL Injection To 0wnage Using SQLMap
SQL injection – one of the most critical vulnerabilities till now – is still included in the OWASP Top 10 […]
SSL/TLS attacks: Part 3 – BREACH Attack
Browser Reconnaissance and Ex-filtration via Adaptive Compression of Hypertext (BREACH) Attack: Previously we learnt how CRIME attacks SSL/TLS using SSL/TLS […]
SSL/TLS attacks: Part 2 – CRIME Attack
Compression Ratio Info-leak Made Easy (CRIME) attack: In the previous section we saw how the Chosen Plain-text attack was used […]
SSL/TLS attacks: Part 1 – BEAST Attack
Recently there has been a lot of news about a new SSL/TLS based attacks which was demonstrated in this year’s […]
LinkedIn Authorization Bypass Vulnerability To Send Messages
Overview: In this following test, I wanted to see whether I was able to view personal details of some other […]