Posts

What is Server Side Request Forgery? # SSRF is a vulnerability that allows attackers to cause the application to make requests to an unintended location from the server that the application is running on.

We can start with a port scan as we always do: ╰─ nmap -sC -sV 10.

What Are Race Conditions? # Race conditions are relatively common and are closely related to business logic flaws.

What Are File Upload Vulnerabilities? # These vulnerabilities are often present when web applications contain file upload functionality that do not sufficiently validate things like the file’s name, type, contents, or size.

As always, we begin with a port scan: ╰─ nmap -sC -sV 10.129.11.88 Starting Nmap 7.

What is Access Control? # Access control is how we describe the constraints that we place on an authorized user in the context of accessing resources and performing actions.

As always, we will start off with a port scan: ╰─ nmap -sC -sV 10.

What Are Business Logic Vulnerabilities # Business logic vulnerabilities are flaws in the design or implementation of an application that let attackers produce unintended behavior.

To read this post, enter the root user’s password hash ("$6…k1"). We start off with a port scan:

Information disclosures seem to be highly contextual depending on where you find them and what kinds of protections are in place.