Hello guys. Hope you are doing well in the pandemic!!! If you have not read my Phase#1,#2 in this beautiful journey of GSoC 2020, here’s the link to it!! Google Summer of Code—Phase #1 This year I got selected into the GSoC program with OWASP Nettacker. Special thanks to my mentors Ali Razmjoo and Sam…medium.com Google Summer of Code — Phase #2 Hello everyone!!medium.com For the last three months, I’ve been working with OWASP Foundation, selected for the Google Summer of Code program. It has…

Hello everyone!! Hope you are doing well in the pandemic!!! If you have not read my Phase#1 in this beautiful journey of GSoC 2020, here’s the link to it!! Google Summer of Code—Phase #1 This year I got selected into the GSoC program with OWASP Nettacker. Special thanks to my mentors Ali Razmjoo and Sam…medium.com Things I learned during the Project: During the past one month, I worked on CSRF automation. …

This year I got selected into the GSoC program with OWASP Nettacker. Special thanks to my mentors Ali Razmjoo and Sam Stepanyan from OWASP for guiding me through the whole process and providing me invaluable resources at times of need and for being so supportive. What is GSoC?

Hello all again, I hope everything in going well on your ends. Today I will explain further about CORS misconfiguration leading to sensitive information leaks!!!! If you haven’t read my previous blog, Please do refer the below link: CORS Misconfiguration Leads To Steal Sensitive Information Disclosure Hello everyone, today I am going to share CORS misconfiguration can leads to sensitive information disclosure.medium.com

Hello everyone, today I am going to share CORS misconfiguration can leads to sensitive information disclosure. Let’s start with Cross-origin resource sharing(CORS). Cross-origin resource sharing (CORS) is a browser mechanism which enables controlled access to resources located outside of a given domain. It extends and adds flexibility to the same-origin…

Hello guys!! I am going to share one of the vulnerability I found in a web application. Let’s start with the short introduction of the web application and the vulnerable extension. It’s kind of low hanging fruit and easy to exploit but could lead a serious impact to the business. …