Cybersecurity

Authors: Berkay Aksaray, Emre Durmaz, Fatih Çelik, Tufan Güngör — — — — — — — — — — As the Trendyol Cyber Security team, our main responsibility is to investigate attack scenarios that threaten Trendyol and its customers, while also conducting research on scenarios that threaten national or international…

Unauthorized Access and Data Leakage via Union-Based SQL Injection — Summary: This vulnerability allows an attacker to run arbitrary SQL queries on the application’s database, which might result in unapproved access, data leaking, or even total system penetration. The technical information about the vulnerability, its effects, and suggested countermeasures are included in the report that follows.

It was one of the hottest day in the hottest district of Kerala, i.e, Palakkad. I was bug hunting all day and the sweat was soaking me all over. I was disturbed and fed up because I couldn’t find anything till noon. In the noon, I was particularly hunting this…

My Cybersecurity Journey: A Path to Empowerment. Hello, everyone! My name is Nasroh Raheem, and today I want to share my journey into the world of cybersecurity and how I became a part of the Cybergirls 3.0 cohort. It has been an incredible adventure, and I hope my experiences will…

We are so excited to offer you the opportunity to be a part of our internship program! … I was exhilarated when I got the mail to join the Cyblack internship program. For 12 weeks I get to intern in a leading organization in the Uk whose mission is to…

By Jerry Tan (Div0-N0H4TS Finance) — id -un Hello, my name is Jerry, and I’m excited to tell you a bit more about my background. Although I’m a recent graduate, I already have over four years of experience in the cybersecurity industry. I achieved this by working and studying simultaneously, which allowed me to gain practical experience while…

Hello there! This is my first ever post on my Cybersecurity journey, specifically Penetration Testing, so please excuse my awkwardness. I am new to this field but am hoping my journaling will help those who are new as well to understand more. Perhaps, in some ways, my experience will be…

In the world of web security, parameter brute forcing is a technique that aims to identify vulnerabilities by systematically testing different parameter values in URLs. This article delves into a bash script that automates parameter brute forcing, leveraging powerful tools such as Waybackurls and Httpx. We’ll discuss each tool’s purpose…

Lessons from the soccer field on embracing iterative skill development to better secure our products and enable our businesses — Longtime security experts often struggle with the idea of allowing software engineers to threat model their own systems. Their concern is that software engineers lack the necessary security expertise to assess a system for potential flaws and make informed decisions on how to address them. As a result, many security…