Just Mobile Security·Jul 22When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection —…TL;DR#1: In the first part of this post, we covered how Just Mobile Security’s offensive and research team identified a recurring pattern…
Just Mobile Security·Jul 22When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection —…Mapping Client-Side Encryption Across LATAM Banking and Fintech Apps
The0bzervAnt·May 29HTTP authentication under the microscopeDuring a recent networking and cybersecurity lab, I worked on setting up an Apache web server and studying how HTTP authentication…
Prashanth Ambalavanan·Apr 1Why Stolen Session Cookies Work on a Different Device — And Why That’s Not a Bug. Can we fix it?Every time someone walks into a coffee shop and connects to the wrong WiFi, they may hand over every session they have open. Here’s exactly…
Ali Aghayev·Mar 9HSTS protokolu və MitMHTTP Strict Transport Security (HSTS) — veb saytların brauzerlərə “mənə yalnız HTTPS üzərindən müraciət et” deməsidir.
Saurabh Patil·Jan 19Public Wi-Fi == Hacker’s Playground“In this article, we’ll walk through an Evil Twin attack that is chained with DNS spoofing and followed by a phishing attack. Before…
Blessing-Igboanusi·Jan 12DNS Poisoning Using EttercapObjective: To demonstrate how an attacker can intercept network traffic and redirect a user from a legitimate website to a malicious one…
ɧrιsнi rajeeѵ·Jan 11Detecting ARP-Based Man-in-the-Middle Attacks Using Snort Intrusion Detection.As a cybersecurity student, I wanted to understand Man-in-the-Middle (MITM) attacks at Layer 2. ARP spoofing operates at the Data Link…
