Security

Hello all, thank you for stopping by. My name is Carl. Although this is my first blog post, do not be afraid to let me have it with the critiques. I want to do a better job of keeping myself accountable and tracking growth throughout my cybersecurity career, as I…

Safety or trust is not a fixed characteristic, it’s a cultural outcome. So, it’s crucial to understand this if we aim to ship products on a global scale. Security is a critical aspect for everyone and most of product types, whether it’s our physical or digital well-being. However, finding out…

Quest: Attempting to find missing people, Impersonators(people using your image on the app), and hidden accounts on TikTok by just using an Image. To fulfill the above quest, we will use a tool called search4face (API also available). Search4face is a face detection technology/tool, that searches your input image against…

Welcome to this series on practical and common use cases of MetaHub. This article serves as an introduction to the series. The articles will focus on the following topics: Part I, MetaHub integration with Prowler as a local scanner for context enrichment Part II, Automatic Security Hub findings suppression using…

Hi amazing researcher, Welcome to another review of the vulnerability discovery on ASDA. Today I want to discuss Host Header Poisoning leading to a one-click-to-account takeover BUT that wasn’t a normal one. technically I used open redirect and Port Poisoning to exploit this vulnerability. Be my guest… Let’s talk about…

The idea of DevSecOps has existed for some time, where engineers are expected to incorporate security concerns at the time of development so it is not a concern layered in after the fact. We called this “shifting left,” and I don’t think we’re shifting left far enough. Security is a…

Service mesh is an Infrastructure layer that handles the inter-service communication within a microservice architecture. It is an orchestrator that sits in between application and the network. It provides a platform for managing traffic, security and observability. Service mesh contains a set of sidecar containers that run alongside the services…

Two-factor authentication (2FA) is a security mechanism that requires users to provide two different authentication factors to access their account: a password and a code sent to their mobile device. In this tutorial, we will walk through the steps to implement 2FA in a Node.js …