Navack·2d agoHOW DOES WEB COMMUNICATES?(HTTP)People have many doubts in there head related to how i am connected to the www (world wide web) or how i am able to visit sites all around…
Kaustubh Asthana·3d agoWeb Shell Upload via Race ConditionNot fooling the filter at all, but catching the server in the half-second gap between accepting a file and deleting it
Martinschibueze·4d ago“Web cache deception, explained: how a URL extension confuses the cache into storing your private…Web cache deception (WCD) is when an attacker tricks the cache into storing a private, dynamic response by taking advantage of the…
Kaustubh Asthana·5d agoRemote Code Execution via Polyglot Web Shell UploadNot disguising a PHP file as an image, but building a file that is honestly both at once
Spoorthi·5d agoPortSwigger lab: Broken brute-force protection, IP blockAuthentication mechanisms are designed to protect user accounts from unauthorized access. One of the most common protections implemented by…
Spoorthi·6d agoPortSwigger Lab: Username enumeration via different responsesAuthentication mechanisms are a critical component of web application security. During this assessment, the login functionality was…
Kaustubh Asthana·6d agoWeb Shell Upload via Obfuscated File ExtensionWhen a filter trusts whatever sits at the end of a string, and a single null byte quietly moves where that ending actually falls
Kaustubh Asthana·Nov 2Web Shell Upload via Extension Blacklist BypassNot disguising a shell as PHP, but convincing Apache to treat a brand-new extension as PHP in the first place
PRiTi.EX·Nov 2Lab5: SSRF via flawed request parsingIn this Lab it accepts the absolute URL instead of the Host header. To solve the lab follow me.
Vishnu VT·Oct 31I Changed One Number in a URL and Read Another Customer’s PAN, Aadhaar and Card PINHorizontal IDOR in SwarnaVault, a demo gold-loan app generated with AI assistance, which I then tested manually.
