efran·Nov 11, 2023Monolithic, Microservice Architectures and Security of JWT TokensBefore testing a system, we need to understand what it is and why it exists. So, let’s start by explaining what a JWT (JSON Web Token) is…
efran·Oct 6, 2023Hack The Box Academy Privilege EscalationTASK1: SSH into the server above with the provided credentials, and use the ‘-p xxxxxx’ to specify the port shown above. Once you login…A response icon1A response icon1
efran·Aug 7, 2023XSS — DOM XSS in jQuery selector sink using a hashchange eventI started to solving XSS Labs on the PortSwigger. The previous XSS labs were straightforward, but in this example, I needed one more step…
efran·Aug 4, 2023XSS — Reflected XSS into a JavaScript string with angle brackets HTML encodedThe solution of the lab was hidden in the source code, and since solving it resembled a bit of puzzle solving, I think it was a very…
efran·Jul 28, 2023XXE — Exploiting XXE to retrieve data by repurposing a local DTDAfter learning the techniques for exploiting XXE vulnerability, it is time to explore exploiting XXE with a local DTD. This technique…
efran·Jul 9, 2023Host Header Manipulations — Password reset poisoning via dangling markupI tried several methods but I will cover the solution and the logic of the beyond. The things is happening on the raw part of the mail…
efran·Jul 8, 2023Host Header Attacks — Web Cache Poisoning via Ambigious RequestsIn this example of the portswigger, the lab’s name provices a hint: We will be using caching mechanism and host header attacks.
efran·May 17, 2021Bluetooth-Low-Energy(BLE) CTFHello! Lately, I’ve become interested in hardware security, and Bluetooth has always fascinated me. In this blog, I won’t explain what BLE…
efran·Mar 15, 2021ServiceNow admin credentials exposed.After I read the blog post on PostSwigger which is about ServiceNow admin credentials exposed, I began to think about whether all the…
efran·Jan 11, 2021SSRF with filter bypass via open redirection vulnerabilityExplanation of the lab : This lab has a stock check feature which fetches data from an internal system. To solve the lab, change the stock…A response icon1A response icon1
