🚩CaptureTheFreeFlag

A Fictional Scenario: Authentication Bypass → BOLA/IDOR → Business Damage

Understanding IDOR in APIs: A Silent but Dangerous Vulnerability

Hello people. Here’s another blog; this one is another bug you can find real quick.

I got tired of doing the same thing manually every single time. Open terminal, run subfinder, wait, run httpx, wait, fire up nuclei, wait…

start the machine >>> you will get ip adddress

Step 1: Browse to the URL

Introduction

Hello everyone,

Introduction CSP adalah singkatan dari Content Security Policy. CSP itu seperti satpam digital yang tugasnya membatasi dari mana website…

🔐 Let’s uncover what’s hidden inside the vault before it’s too late.

It started like a normal Monday morning.

Enforcement data is often viewed in isolation a warning letter here, an injunction there. But when aggregated across time, product…

Windows kullanıcılarının en güvenli limanı neresi diye sorsak, muhtemelen çoğumuz Not Defteri der. Makro yok, script çalıştırmıyor, sadece…

Hello, stranger — let’s begin.

Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…

By Subrat Samantaray

Category: Web | Difficulty: Medium

Project Overview