Most web applications today are protected by WAFs, making it challenging for pentesters to test for payload-based vulnerabilities like SQL Injection and XSS. Additionally, automated tools and scann...

Account takeover attacks are a serious threat to individuals and organizations and are becoming increasingly common. In order to stay ahead of cybercriminals, it is important for Developers and Pen...

Command injection is a type of vulnerability that allows an attacker to execute arbitrary system commands on a vulnerable server. This type of attack occurs when an application fails to properly va...

Hey Everyone, Hope you’re doing well. It’s been a While since my first write-up, I hope you learn something new from this one and enjoy it. This post presents a new technique to exploit a bad imp...

Link to my Original Write-Up: sandh0t.medium.com/think-outside-the-scope-advanced-cors-exploitation-techniques-dad019c68397 Hi everyone, My name is Ayoub, I’m a security researcher from Moro...

Hey Everyone, Hope you’re doing well. This my first write-up, I hope you learn something new from this one and enjoy it. This post is about an old finding that I had discovered while testing an i...