Understanding Server Side Template Injection in Flask Apps
What is Flask? Flask is a lightweight WSGI web application framework that is very popular for making APIs and microservices. However, it is also an amazing framework
July 13, 2022
How a Simple IDOR Led Me to Delete Any Account
Introduction How did an IDOR (Insecure Direct Object Reference) Vulnerability lead me to delete anyone’s account? This is a tale about a particular application that
July 12, 2022
Spring4shell – Critical Remote Code Execution in Spring Framework
Introduction Ever since spring4shell came out in the news, the infosec community has been comparing it to the log4shell that took the internet by storm.
June 2, 2022
Top 5 Things To Look For When Choosing A Penetration Testing Vendor
The Cyber Security market has grown exponentially in the past decade and will continue to grow to meet the ever-increasing demand. Every organization is currently
May 17, 2022
Transition to a Safer Card Industry with PCI DSS v4.0 – A Summary Report by Payatu
On its journey to actively updating compliance standards to tackle modern-day cyber security threats to the Payment Card Industry, the PCI SSC (Payment Card Industry
April 28, 2022
An Intro To Electron Application Penetration Testing
Hi Folks, Do you want to try performing electron application penetration testing? but having trouble in knowing where to start? If you’re looking for a
March 21, 2022
Developers and Hackers, Understand OAuth and it’s Grant Type
Introduction While browsing the web, you’ve almost certainly come across sites that let you log in using your social media account. There is a high
March 18, 2022
WebSockets Security Explained for Security Enthusiasts
Introduction Today we are going to take a dive into WebSockets and how we can exploit vulnerabilities/misconfigurations in WebSockets. At the end, we will also
March 14, 2022
A Journey from IDOR to Account Takeover
Today I’ll be discussing about the IDOR (insecure direct object reference) vulnerability in an application. Where I was able to take over the account via
February 22, 2022
Log4j Vulnerability-An overview to the un-noticed open window in your application.
Log4j Vulnerability-An overview to the un-noticed open window in your application. Log4jShell !!! Log4j vulnerability !!! Log4j RCE !!! , you are probably getting all
January 9, 2022
