Browsing Tag
hacker
164 posts
Detecting Kernel-Level Rootkits Through System Call Table Redirection: A Look Back at a Foundational Methodology
Every rootkit tells the same lie. It sits between an application and the truth, and it decides what…
Threat Modeling Best Practices
I’ve sat through threat modeling sessions that produced genuinely great insights, and I’ve sat through ones that felt…
Not All Bug Bounty Programs Are the Same: Finding Your Target
Finding the right bug bounty program to target is the crucial first step to becoming a successful bug…
(Out of Scope) Vulnerabilities: Knowing What Not to Report in Bug Bounty Programs
However, in the world of security research and bug bounties, there are several common findings and false positives…
Relative Path Overwrite (RPO): Exploiting Path Confusion for Defacement
Introduction Relative Path Overwrite (RPO) is an older, lesser-known vulnerability that still impacts a significant number of applications.…
On-Site Request Forgery (OSRF): A Forgotten Client-Side Attack
Introduction On-Site Request Forgery (OSRF) is an older vulnerability that often goes unrecognized. It is similar to Cross-Site…
Server-Side Template Injection (SSTI): Exploiting the Backend View
Introduction To understand Server-Side Template Injection (SSTI), one must first grasp the role of templates, and to understand…
Web Cache Deception: Tricking the Caching Server to Expose Private Data
Introduction Like web cache poisoning, Web Cache Deception (WCD) is an attack directed against the caching server. The…
Authentication Flaws: Compromising User Identity
If an application requires you to log in, it must use some form of authentication to verify who…
Directory Traversal: Navigating the File System
Directory traversal is a vulnerability that occurs when developers improperly use user-supplied input to fetch files from the…