Browsing Tag
hacking
211 posts
Understanding and Defending Against SAML Vulnerabilities
Introduction to Security Assertion Markup Language (SAML) If you are currently working with a Fortune 500 company, a…
API Hacking: Navigating the Modern Application Landscape
The architecture of today’s applications is vastly different from the past. Back in the day, applications were often…
Insecure Direct Object Reference (IDOR): Bypassing Access Controls
Insecure Direct Object Reference (IDOR) is a vulnerability that occurs when a user is able to view or…
Directory Traversal: Navigating the File System
Directory traversal is a vulnerability that occurs when developers improperly use user-supplied input to fetch files from the…
Cross-Site Scripting (XSS): Executing Code in the User’s Browser
Cross-Site Scripting (XSS) is one of the oldest and most common vulnerabilities out there and has been on…
Mastering Web Application Hacking: The Power of SQL Injection
My journey started as a penetration tester specializing in web applications, and when I transitioned to bug bounties,…
The Essential Tool for Every Bug Bounty Hunter: Mastering Burp Suite
If there is one tool that you NEED to have to be a successful Bug Bounty Hunter it…
Database Exposure: A Guide to Common Misconfigurations and Defensive Strategies
Databases are the heart of any modern application, storing crucial information, from simple user preferences to highly sensitive…
Exploitation Phase: Targeting CMS, GitHub, and Subdomain Takeovers
According to a survey performed by W3Techs, 62% of the internet is run on a Content Management System…
The Exploitation Phase: Hacking Known Vulnerabilities in Bug Bounty
This guide focuses entirely on the exploitation phase of a bug bounty hunt. While the preceding phases—reconnaissance and…