Web App Security

JSON Web Tokens (JWT) are a popular method for implementing authentication and authorization in web applications. However, like any security mechanism, they can be subject to attacks. Some common types of JWT attacks include: 1. Token Brute-Forcing: Attackers can try to guess the JWT token by brute-forcing it with different combinations of secret keys, and once the key is found, they can take over the user account.

Cross-Site Request Forgery CSRF is an attack technique that attempts to bypass a defense that is marked with a CSRF token. Suppose you are a website builder and you create a new website. You create a profile section that allows you to update your address. Then came a bad actor…

Web application pentesting is a crucial aspect of cybersecurity that involves identifying and assessing vulnerabilities within a web application. As web applications continue to play a significant role in modern business operations, they have become prime targets for attackers looking to gain unauthorized access to sensitive information. Therefore, it’s essential…

Hello, welcome to my new article, this article will talk about a vulnerability called XXE - XML external entity injection. First, let me introduce my self, I am Idan and I am a penetration tester / red teamer. Also, I am Practitioner Community Manager at CySource Cyber Security Company. Before…

Authorization Vulnerabilities in Concourse CI — tl;dr Priority differences in common golang HTTP request argument fetchers can result in parameter pollution. Security checks based on these parameter fetching priority differences granted me the ability to bypass horizontal authorization checks and access resources outside of my team’s scope in Concourse CI. This issue was disclosed to VMWare and…

As cybersecurity professionals, we are well aware of the importance of fuzzing in identifying potential security vulnerabilities when testing applications. However, the effectiveness of fuzzing heavily relies on the wordlist used for the process. …

This article is as convoluted as my thoughts. Aside from the introduction, the following text is meant to be skimmed in a way that allows for the neural connections to touch. That’s all. My network of thought is essential to understanding the technological mesh I have to deal with when…

Today I’m making a walkthrough on how I found my first bounty . so I was testing a company’s domain let’s call it redacted.net I went to test mycompany.redacted.net, when I ran out to changing password functionality but it was a bit different as the administrator can change the password…

Adding a Content Security Policy to web applications is becoming increasingly popular. This article discusses how to implement one and things to consider that you may not find in a simply explanatory page. Setting the scene Regular ol’ web applications are susceptible to a number of security vulnerabilities — we’ve all heard of…