Mar 16

TryHackMe — OWASP Top 10 — Security Misconfiguration

Security Misconfiguration occurs oftentimes because of human error but what makes it different from the others is that it could be easily avoided most times if the proper measures were taken.

Owasp

2 min read

TryHackMe — OWASP Top 10 — Security Misconfiguration

Security Misconfiguration occurs oftentimes because of human error but what makes it different from the others is that it could be easily avoided most times if the proper measures were taken.

Published in System Weakness

·Mar 16

TryHackMe- OWASP Top 10 — Broken Access Control

This lab walkthrough will focus on the Broken Access Control, one of the OWASP Top 10 Vulnerabilities. Broken Access Control is an instance in which a user that is not authorized to access an administrative page is able to do so. [Severity 5] Broken Access Control (IDOR Challenge)

Owasp

2 min read

TryHackMe- OWASP Top 10 — Broken Access Control

This lab walkthrough will focus on the Broken Access Control, one of the OWASP Top 10 Vulnerabilities. Broken Access Control is an instance in which a user that is not authorized to access an administrative page is able to do so.

[Severity 5] Broken Access Control (IDOR Challenge)

Published in System Weakness

·Mar 16

TryHackMe — OWASP Top 10 — XML External Entity

This lab will be focusing on the OWASP Top 10 lab on TryHackMe; XML (Extensible Markup Language) External Entity (XXE)Attack is a vulnerability that takes advantage of features of XML parsers/data. It allows attackers to read files that they would otherwise be unauthorized to view and to have access to…

Owasp Top 10

3 min read

Published in System Weakness

·Mar 8

TryHackMe — OWASP Top 10 — Sensitive Data Exposure

Sensitive Data Exposure is when a website unintentionally exposes data that would have been stored in the site’s database. This blog will focus on this OWASP vulnerability and the ways in which it can be exploited.

Owasp

2 min read

Mar 6

TryHackMe — OWASP Top 10 — Authentication

Authentication is one of OWASP's Top 10 Vulnerabilities and this blog serves to provide a walkthrough of the TryHackMe Lab on the OWASP Top 10 which provided insight into this specific vulnerabilty and how to exploit it. What is Authentication as it relates to OWASP?

Tryhackme

2 min read

Published in System Weakness

·Mar 6

TryHackMe — OWASP Top 10 — Injection

Hey, guys, I’m back with another walkthrough of a tryhackme lab but this time the focus is on Open Web Application Security (OWASP) 🐝 vulnerability and of course how to exploit it. This will be a multi-part blog, this blog will focus on Injection. OWASP Top 10: Injection Broken Authentication Sensitive Data Exposure …

Owasp

2 min read

Published in System Weakness

·Mar 2

TryHackMe- Burp Suite Walkthrough

Hey guys, this blog will focus on the powerful web app pentesting tool Burp Suite and its components. So… if you have read my previous blogs then you would know that I am familiar with the Burp Suite tool therefore I won’t get into how to download it and all…

Burpsuite

10 min read

Published in System Weakness

·Feb 24

Lab: Username enumeration via subtly different responses

Heyy there, Welcome to another one of my blogs based on the Web Security Academy learning path- Vulnerabilities. Just a bit of information before I continue…

Authentication

3 min read

Lab: Username enumeration via subtly different responses

Feb 24

Lab: 2FA simple bypass

Hey everyone, Welcome to my lab blog series on Authentication based on the Web Security Academy learning path. I am excited to do this lab and share my experience with you. Please check it out below! 😃

Walkthrough

2 min read

Published in System Weakness

·Feb 22

Lab: Username enumeration via different responses

Hey guys, welcome to another blog series but this time the focus is on Authentication based on the learning path on Web Security Academy. I am excited to learn about authentication vulnerabilities and share my journey with you.

Authentication

3 min read