Browsing Tag
linux
297 posts
Understanding and Defending Against Cross-Site Scripting (XSS) Vulnerabilities
Cross-Site Scripting (XSS) is consistently reported as one of the most common security flaws in web applications. Its…
Mastering Web Hacking Reconnaissance: The Foundation of Bug Bounty Hunting
The first step to attacking any target is conducting reconnaissance, or simply put, gathering information about the target.…
Environmental Setup and Traffic Interception
To hunt for bugs efficiently, you’ll need a well-configured environment. This chapter guides you through setting up your…
Not All Bug Bounty Programs Are the Same: Finding Your Target
Finding the right bug bounty program to target is the crucial first step to becoming a successful bug…
(Out of Scope) Vulnerabilities: Knowing What Not to Report in Bug Bounty Programs
However, in the world of security research and bug bounties, there are several common findings and false positives…
Access Control and Security Through Obscurity
Security through obscurity is a strategy in web application development that makes the dangerous assumption that a vulnerability…
Detecting XML External Entities (XXE) Vulnerabilities
XML External Entity (XXE) is an attack that exploits a flaw in an application’s XML parser configuration to…
Cross-Site Request Forgery (CSRF) and Insecure Session Authentication
Cross-Site Request Forgery (CSRF) is a vulnerability where an attacker takes advantage of a logged-in user’s authenticated state…
A Quick Overview of Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS) stands as a prevalent and dangerous vulnerability in web applications. It occurs when a malicious…
Relative Path Overwrite (RPO): Exploiting Path Confusion for Defacement
Introduction Relative Path Overwrite (RPO) is an older, lesser-known vulnerability that still impacts a significant number of applications.…