Pinned
Host Header: Small Change, Big Risk
One mistake in the request header - total compromise in return.
Cybersecurity Blog by Amal PK – Ethical Hacking, Pentesting, Bug Bounty, CTFs & InfoSec Tips
Latest articles
Caption HackTheBox Writeup
Compromising the Caption machine by abusing GitBucket and a buggy log service to gain root access.
Cicada HackTheBox Writeup
An Active Directory journey from user enumeration to domain admin via backup privilege abuse
NoSQL injection
NoSQL injection is a vulnerability where an attacker is able to interfere with the queries that an application makes to a NoSQL database
CRLF Injection: A Critical Web Application Vulnerability
CRLF (Carriage Return Line Feed) injection is a type of attack that targets web applications through the manipulation of HTTP headers. The term “CRLF” refers to the characters used to mark the end of a line in HTTP requests and responses. These chara...
Web Cache Deception: Understanding and Mitigating Security Risks
Web Cache Deception is a technique that attackers use to manipulate caching systems and mislead web applications into serving unintended content
Unrested HTB Writeup
About Unrested Unrested is a medium difficulty Linux machine hosting a version of Zabbix. Enumerating the version of Zabbix shows that it is vulnerable to both CVE-2024-36467 (missing access controls on the user.update function within the CUser class...