PinnedMember-onlyThe Dark Side of Covering Up Data Breaches: Why Transparency is CrucialIn today’s digital age, data breaches are happening more frequently. Cyberattacks that can compromise sensitive data like personal information, financial data, and intellectual property are a threat to businesses of all sizes and sectors. While some businesses decide to acknowledge these security lapses and take responsibility, others would rather keep…Top Data Breaches4 min readTop Data Breaches4 min read
Apr 28, 2022Member-onlyWhat to do to protect yourself against fake websitesNow when you are looking for something on the Internet, then most likely several links in the search engine results are fake sites that look like sites of online stores or even banks, but in fact, they only collect your logins and passwords, credit card numbers, etc. money from them…Cybersecurity3 min readCybersecurity3 min read
Oct 27, 2020Member-onlyLet’s talk about Improper Resource ShutdownThe program does not deliver or inaccurately releases a resource before it is made available for re-use. the function fails to release a lock it acquires, which might lead to a deadlock. 1. Android SQLite Database The Android project fails to release the Android database handler in its onPause(), onStop(), or onDestroy() event handlers.An…Bug Bounty4 min readBug Bounty4 min read
Oct 12, 2020Member-onlyARPCON 2020 Forensics and Misc Challenge Write-upHello guys I hope you liked the CTF and the virtual hacking conference. I come directly to the point “ सीधी बात नो बकवास ”Forensics5 min readForensics5 min read
Published inInfoSec Write-ups·Aug 17, 2020Member-onlyLet’s talk about buffer overflowA buffer overflow, or buffer overrun, occurs when more extra data is put into a fixed-length buffer than the buffer can manage. Buffer overflow is possibly the best-known form of software security vulnerability. Most software developers know what a buffer overflow vulnerability is, but buffer overflow attacks corresponding to both…Buffer Overflow6 min readBuffer Overflow6 min read
Published inInfoSec Write-ups·Jun 1, 2020Member-onlyLet’s talk about privacy violation issues in androidWhen security and privacy demand clash, privacy should usually be given a higher priority. To accomplish this and still maintain required security information, cleanse any private information before it exits the program. To enforce good privacy management, develop and strictly adhere to internal privacy guidelines. The guidelines should specifically describe…Android5 min readAndroid5 min read
Jan 16, 2020Member-onlyLet’s talk about open redirect vulnerabilityExplanation Redirects allow web applications to direct users to different pages within the same application or to external sites. Applications utilize redirects to aid in site navigation and, in some cases, to track how users exit the site. …Infosec3 min readInfosec3 min read
Published inInfoSec Write-ups·Oct 25, 2019Member-onlyWhen I found iframe injection and illegal redirect (dom based)An iFrame injection is a very common cross-site scripting (or XSS) attack. It consists of one or more iFrame tags that have been inserted into a page or post’s content and typically downloads an executable program or conducts other actions that compromise the site visitors’ computers. In the best case…Bug Bounty2 min readBug Bounty2 min read
Published inInfoSec Write-ups·Oct 12, 2019Member-onlyWhen I found error logs through debug information(cgi scripts) and ws-ftp logDuring the assessment, I have found the debug URL on xyz.com which is disclosing the error logs.. sorry i can’t disclose website name … lets start… when i start to recon and try to find bugs on this program . i tried many things like xss,idor,nd etc….(nothing spot) when i…Cybersecurity5 min readCybersecurity5 min read
Published inInfoSec Write-ups·Sep 29, 2019Member-onlyLet’s see how session cookie or cookie not sent over SSLExplanation Modern web browsers support a secure flag for each cookie. If the flag is set, the browser will only send the cookie over HTTPS. Sending cookies over an unencrypted channel can expose them to network sniffing attacks, so the secure flag helps keep a cookie's value confidential. …Ssl3 min readSsl3 min read
