Reports-Research
Reports-Research
Injection Attacks Analysis: SQL Injection, Host Header, and more
This paper is intended to provide a brief description of the Blind SSRF attack. This proof of concept will help visualize and understand the attack when performed by…
Reports-Research
Introduction to Insecure Deserialization
This article aims to explain the risks posed by the Insecure Deserialization vulnerability using a typical attack vector against it. Insecure Deserialization is one of the Top-Ten most…
Reports-Research
A Hands-on Approach to Linux Privilege Escalation
This paper intends to provide multiple techniques that pentester can use to escalate their privileges and gain access to higher roles in Linux based operating systems. Key Pointers:
Reports-Research
Deep Insight into Social Engineering
This document is intended to provide a detailed explanation about Social Engineering and what it consists of. It also covers a case study to give a better understanding…
Reports-Research
Understanding and Exploiting Zerologon
This paper aims to explain the detailed working of Zerologon vulnerability. Zerologon vulnerability arise due to insecure implementation of AES-128 Counter Feedback Mode of Operation in Microsoft Netlogon…
Reports-Research
SMBGhost CVE 2020-0796
CVE 2020-0796 was released in March 2020, with a CVSS:3.0 score of 10.0, which makes it a vulnerability to look out for. In this report, the readers will…
Reports-Research
URL Exploiting XXE to SSRF
The paper aims to perform a Server Side Request Forgery attack using Xml eXternal Entity vulnerability. Developers need to make sure these vulnerabilities are mitigated in their web…
Reports-Research
Apache GhostcatCVE 2020-1938
The CVE 2020-1938 takes advantage of Tomcat’s AJP connector, which helps the attacker read sensitive information from web apps and even more critical action if file uploads are…
Reports-Research
Blind SSRF with Shellshock Exploitation
This paper is intended to provide a brief description of the Blind SSRF attack. This proof of concept will help visualize and understand the attack when performed by…