Identify and Exploit LFI (Local File Inclusion) Vulnerabilities
In this write up, we’ll show you how to identify and exploit LFI Vulnerabilities. We will also discuss their impact and how to mitigate them with examples.
Using VPS for Bug Bounty, comparing VPS providers
Exploit XSS Injections with a Powerful One-Line Technique
In this article, we’ll demonstrate practical methods for detecting and exploiting Cross-Site Scripting (XSS) injections. These techniques can be applied during source code security reviews to enhance speed and accuracy in your methodology, benefiting both security professionals and bug bounty hunters.
A primer on OS Command Injection Attacks
How to Exploit “improper error handling” in Web Applications
In this article we’ll discuss and demonstrate how improper error handling can be exploited in Web Applications. We’ll also discuss how various types of error handling can introduce various types of attack vectors.
Security Engineer vs. Software Engineer
Common and Uncommon types of SQL Injection
In this article, we’ll explain some of the most common and uncommon types of SQL Injection. We’ll also discuss how these attacks can impact your company and your customers, and show you the measures you need to take to mitigate and minimize such risks.
Google Dorking: Manual and Automated Methods for finding Hidden Information
In this article, we will showcase how to effectively use Google Dorking to uncover hidden and sensitive information on websites. Google Dorking enables security researchers to proactively discover and address potentially sensitive information that might not be intended for public access.