A hacker’s guide to Google dorking
Google dorking is a comparatively simple yet invaluable reconnaissance technique for ethical hackers to learn. Suitably customised ‘dorks’ (Google searches that reveal sensitive information about ...
Brumens
HTTP header hacks: basic and advanced exploit techniques explored
Did you know that manipulating a single HTTP header can unlock high-impact security flaws hidden within a web application? HTTP headers control how browsers and servers interact with data, so thes...
The art of payload obfuscation: how to mask malicious scripts and bypass defence mechanisms
How often have your exploits been blocked by firewalls or neutered by mysterious processes that alter key characters? This is why payload obfuscation is such a game-changing skill for offensive se...
HTTP fingerprinting – sleuthing for a web application’s hidden vulnerabilities
HTTP fingerprinting is an invaluable way to discover the underlying technologies powering a web application. From analysing HTTP headers to performing malformed HTTP requests, these reconnaissance...
Recon Series #2: Subdomain enumeration – expand attack surfaces with active, passive techniques
Ever wondered whether you ever missed a hidden subdomain that would have unlocked a critical vulnerability and a large bounty reward? In this article, you will discover how cutting-edge subdomain ...
XSS attacks and exploitation: The ultimate guide to cross-site scripting
Cross-Site Scripting (XSS) is a super-common vulnerability that infects a victim’s browser with malicious JavaScript code, which is then used to hijack the victim’s data or, in some cases, take ful...
White-box penetration testing: How to debug for JavaScript vulnerabilities
This is a guide to performing white box penetration testing on a JavaScript web application running within a Docker container. In testing a web application vulnerable to prototype pollution, we wil...
White-box penetration testing: Debugging for Python vulnerabilities
This article explains how to perform white-box penetration testing on a Python web application running in a Docker container. In this white-box pentest, we will go through how to debug Python in VS...
Limitations are just an illusion - advanced server-side template exploitation with RCE everywhere
This article explains some novel techniques for exploiting server-side template injections (SSTIs) with complex, unique payloads that leverage default methods and syntax from various template engin...
White-box penetration testing with Xdebug: Debugging for PHP vulnerabilities
Having access to your target’s source code is obviously an invaluable advantage of white-box penetration testing. This article will help you leverage that benefit in the context of PHP application...