Unlocking OAuth Security

In this blog, we will uncover the different oauth security implications on both the client applications and the oauth server.

PII Leakage via IDOR Weak PasswordReset = Full Account Takeover

Hello Hunters, this is a quick write up on one of my recent findings on a bug bounty program. Before jumping into the vulnerability, let…

JNDI Injection — The Complete Story

This blog investigates the security implications of JNDI Injection, a vulnerability that arises when malicious actors manipulate JNDI…

Unveiling Command Injection Vulnerabilities in Java: Deep dive into ProcessBuilder and Runtime

Java’s ProcessBuilder and Runtime classes offer powerful functionality, but they also come with risks.

GitHub - darklotuskdb/ios-reloader: The iOS Reloader is a weaponizing tool for jailbroken iOS...

The iOS Reloader is a weaponizing tool for jailbroken iOS devices. It facilitates the installation of a collection of tools on iOS devices (iPhone/iPad) that are essential for penetration testing p...

GitHub - vim/vim: The official Vim repository

The official Vim repository. Contribute to vim/vim development by creating an account on GitHub.

Cloudflare Pages, part 1: The fellowship of the secret

How I was able to bypass the admin portal by using the default credentials in BBC Corporation.

Hello everyone, today I will be talking about one of the critical bug which I found on the BBC website which is bypassing the admin portal…

Mobile Apps Exposing AWS Keys Affect 100M Users’ Data - BeVigil Blog

CloudSEK’s BeVigil, a security search engine for mobile apps, has found that 0.5% of mobile apps expose AWS API keys, thus putting their internal networks and data at high risk.