API Abuse VulnerabilityWhat is API Abuse? API abuse refers to the act of wrong-handling of APIs, gaining unsanctioned access, and modifying the key functions so that APIs can be used for adversarial processes like raiding a server or overburdening a server. It’s performed ...Aug 23, 2023·7 min read·105
Type Juggling VulnerabilityWhat is Type Juggling? Type Juggling (also known as Type Confusion) vulnerabilities are a class of vulnerabilities wherein an object is initialized or accessed as the incorrect type, allowing us as attackers to potentially bypass authentication or un...Aug 1, 2023·3 min read·281
Padding OracleWhat is Padding Oracle? Padding Oracle is the exploitation of a weakness in the authentication of a PHP website. The website uses Cipher Block Chaining (CBC) to encrypt information provided by users and use this information to ensure authentication. ...Jul 29, 2023·5 min read·103
CSTI VulnerabilityWhat is CSTI? Client-side template injection (CSTI) vulnerabilities arise when applications using a client-side template framework dynamically embed user input in web pages. When a web page is rendered, the framework will scan the page for template e...Jul 26, 2023·3 min read·154
SSTI VulnerabilityWhat is SSTI? Server-side template injection (SSTI) is when an attacker can use native template syntax to inject a malicious payload into a template, which is then executed server-side. Template engines are designed to generate webpages by combining ...Jul 26, 2023·3 min read·103
SSRF VulnerabilityWhat is SSRF? Server-side request forgery (SSRF) is a web security vulnerability that allows us as attackers to induce the server-side application to make requests to an unintended location. In a typical SSRF attack, the attacker might cause the serv...Jul 26, 2023·5 min read·44
CSRF VulnerabilityWhat is CSRF? Cross-site request forgery (CSRF) vulnerabilities may arise when applications rely solely on HTTP cookies to identify the user that has issued a particular request. Because browsers automatically add cookies to requests regardless of th...Jul 26, 2023·4 min read·22
