When you run a penetration test of a web page that generates dynamic content using templates with user-provided values, you may encounter server-side template injection vulnerability. Manual identification of the template engine you are dealing with and subsequent exploitation can be easily automated using the Tplmap tool. Tplmap is able… Continue reading →
Mapping web application resources can reveal important information about the tree and directory structure of your application, thereby revealing information about the software used, its version, or the programming language used in the construction. It consists in building a systematic view, which usually hierarchically shows what data the WEB application… Continue reading →
When you run a penetration test of a web application, you can generalize several steps. Each of them is characterized by the use of different tools and the same result obtained. It can also be noted that individual phases do not always occur closely after each other. Most often, however,… Continue reading →
According to statistics maintained by theOpen Web Application Security Project (OWASP), the ten most common security errors can be distinguished. The graphic below shows how often veracode, a web application security research organization, detects these vulnerabilities during a preliminary risk assessment. The vulnerability detection rate from the OWASP Top 10… Continue reading →
Penetration testing can be defined as a legitimate and authorized attempt to find andexploit security vulnerabilities in computer systems to improve the security of these systems. This process includes testing vulnerabilities as well as providing complete evidence of a so-called "vulnerability" attack. POC (proof of concept). This is to confirm… Continue reading →
Speed of information transmission plays an important role in the modern world. The development of technology has made it necessary to operate in a constant hurry, in fact, where "every minute is at a premium". An example of this phenomenon is brokerage houses, which build their headquarters as close as… Continue reading →
Cześć podróżniku!
Jestem Michał. Cyberbezpieczeństwo jest moją pasją i pracą. Hobbystycznie zajmuję się drukiem 3d. W ramach tej strony staram się dzielić się wiedzą właśnie z tych obszarów. Mam nadzieję, że znajdziesz tutaj przydatne dla siebie informacje :)
Więcej o mnie...
Subscription
Wspieraj tę stronę
Jeżeli podoba Ci się moja twórczość możesz mnie wesprzeć kawą :)
