Threat Hunting: Threat hunting is a specific domain in cyber security that aims to identify any attacks or threats in the business organization. Threat hunters identify these attacks in the network and use tools such as EDR to detect any advanced persistent threats that might have not been detected by…

Introduction - As we all know, when developers build applications, they must go through numerous stages of testing and must be protected from vulnerabilities. But did you know that even after numerous stages of manual and automated testing, the application might still be vulnerable to undiscovered vulnerabilities that go undetected…

Every developer imports specific libraries to ensure that their code runs efficiently without the need to rewrite the entire library from scratch. At the same time, how will the developer ensure that the library used in the application code is secure? This is one of the primary concerns when developing…

Before diving into the attack scenario let’s first understand the attack surface and an important part of the network called Domain Name Service. Domain Name Service - The service is used to map domain names to the IP address. The backend systems recognize every domain with an IP address. This service helps to map…

Five Case Studies in Cyber Forensics: Creator @Control_Risks These case studies determine real-world problem solving, investigation aspects of Cyber Forensics and provide pieces of evidence to prove the facts gathered. 2. Digital Forensics and IR: Creator @Gerald_Auger In this conversation, @panoptcy explains the role of digital forensics professionals from a…

OWASP Juiceshop — Created by Bjoern kimminich This application contains various vulnerabilities which can be exploited which helps users to understand the methodology and attack scenarios. It’s a simulated environment. OWASP Juice Shop OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security…owasp.org 2. OWASP WebGoat: An insecure web application with existing underlying vulnerabilities which are commonly found in Java-based web applications.

Introduction - Hey techies!! The journey from knowing nothing in penetration testing to taking down eCPPT has been an amazing encounter. A hands-on certification that includes phases from enumeration to exploiting vulnerabilities and gaining root access. …

Hey guys, hope you are doing well. As promised earlier this is a write-up of my recent findings on CSRF(Cross-site request forgery) bugs. It’s so amazing to know the time invested to understand the bugs and their impact is paying off drastically. If interested you can check my recent CSRF…

Hey guys, Hope you are doing well. In this article, I’m going to share my recent finding which was mostly about the enumeration part. So without any further delay let’s dive in. Enumeration - I picked a target from Bug crowd assume it as redacted.com (coz everyone mentions that way :). The…