Spoorthi·1h agoPortSwigger lab: Broken brute-force protection, IP blockAuthentication mechanisms are designed to protect user accounts from unauthorized access. One of the most common protections implemented by…
Spoorthi·1d agoPortSwigger Lab: Username enumeration via different responsesAuthentication mechanisms are a critical component of web application security. During this assessment, the login functionality was…
Kaustubh Asthana·1d agoWeb Shell Upload via Obfuscated File ExtensionWhen a filter trusts whatever sits at the end of a string, and a single null byte quietly moves where that ending actually falls
Kaustubh Asthana·3d agoWeb Shell Upload via Extension Blacklist BypassNot disguising a shell as PHP, but convincing Apache to treat a brand-new extension as PHP in the first place
PRiTi.EX·3d agoLab5: SSRF via flawed request parsingIn this Lab it accepts the absolute URL instead of the Host header. To solve the lab follow me.
Vishnu VT·5d agoI Changed One Number in a URL and Read Another Customer’s PAN, Aadhaar and Card PINHorizontal IDOR in SwarnaVault, a demo gold-loan app generated with AI assistance, which I then tested manually.
PRiTi.EX·6d agoLab2: Host header authentication bypass — HTTP Host header attacksThis lab makes an assumption about the privilege level of the user based on the HTTP Host header. I solved it using a simple trick follow…
Kaustubh Asthana·6d agoWeb Shell Upload via Path TraversalLab 3 in the File Upload Vulnerabilities series: what happens when a server blocks script execution in the upload folder but not in the…
NadaAshraf·Oct 29API Testing: How APIs Really BreakMost people test web apps by clicking around. The frontend is polished, the buttons do what they say, and everything looks fine.
ToikZakiyudin·Oct 29Cara Mengatasi Eror Jaringan Kali Linux & Burp Suite saat Pertama Kali Setup (Panduan…Bagi siapa saja yang baru memulai perjalanan di dunia web penetration testing atau bug bounty, melakukan konfigurasi awal Burp Suite di…
