Cyber SeklerGit Gone Wrong: Application Compromise via Exposed .git DirectoryEvery penetration test begins with reconnaissance, and my initial steps always involve looking for potentially interesting endpoints…Jul 12Jul 12
Cyber SeklerThe Bug Hunter’s Methodology Live Course ReviewI’ve recently completed Jason Haddix’s two-day live course and wanted to share my insights and address any questions you might have. Before…Nov 28, 2023Nov 28, 2023
Cyber SeklerFrom Unauthenticated SQL Injection to Remote Command Execution (RCE)I’m back with another blog post discussing an SQL injection vulnerability that I found during one of my engagements. While SQL injection…Oct 30, 2023Oct 30, 2023
Cyber SeklerBroken Access Control Leading to Privilege EscalationBroken Access Control is the number one vulnerability on the OWASP top 10 list, and I understand why, almost every pentest I conduct I find…Oct 30, 2023Oct 30, 2023
Cyber SeklerCode Review: How to Get StartedFor you to move up the skill ladder when it comes to web application testing, I believe that learning how to read code and understand it…Oct 30, 2023Oct 30, 2023
Cyber SeklerPentest Reporting: “More time to Pwn less time to Doc”The writing of pentest reports can be time-consuming when done manually, and while I am sure we can all agree that this is the least fun…Oct 30, 2023Oct 30, 2023
Cyber Sekler2FA Bypass: How not to implement two-factor authenticationTwo-factor authentication (2FA) is an important security measure that helps protect against unauthorized access to accounts and systems. It…Oct 30, 2023Oct 30, 2023
Cyber SeklerHow I Hacked a Domain Controller in 3 Easy StepsSometimes getting the keys to the kingdom is too easy and can have devastating consequences if it gets into the hands of the wrong people…Oct 30, 2023Oct 30, 2023