Browsing Category
Books
65 posts
API Documentation: A Hacker’s Goldmine for Vulnerability Hunting
Introduction The vast majority of vulnerabilities found in Application Programming Interfaces (APIs) are the result of a design…
Understanding and Defending Against SAML Vulnerabilities
Introduction to Security Assertion Markup Language (SAML) If you are currently working with a Fortune 500 company, a…
Authentication Flaws: Compromising User Identity
If an application requires you to log in, it must use some form of authentication to verify who…
API Hacking: Navigating the Modern Application Landscape
The architecture of today’s applications is vastly different from the past. Back in the day, applications were often…
Insecure Direct Object Reference (IDOR): Bypassing Access Controls
Insecure Direct Object Reference (IDOR) is a vulnerability that occurs when a user is able to view or…
Directory Traversal: Navigating the File System
Directory traversal is a vulnerability that occurs when developers improperly use user-supplied input to fetch files from the…
Exploiting File Upload Vulnerabilities: Achieving Remote Code Execution
File upload vulnerabilities aren’t as common as they once were, but that doesn’t mean you won’t encounter them.…
Cross-Site Scripting (XSS): Executing Code in the User’s Browser
Cross-Site Scripting (XSS) is one of the oldest and most common vulnerabilities out there and has been on…
Mastering Web Application Hacking: The Power of SQL Injection
My journey started as a penetration tester specializing in web applications, and when I transitioned to bug bounties,…
The Essential Tool for Every Bug Bounty Hunter: Mastering Burp Suite
If there is one tool that you NEED to have to be a successful Bug Bounty Hunter it…