Understanding the Structure Of a URL to Detect Phishing Threats

Learn the components of a URL and how tools like getallurls (gau) help analyze URLs for security and research.

Bug bounty hunting and penetration testing often require testing multiple URLs for Open Redirection and Cross-Site Scripting (XSS)…

Greetings everyone. Today, I will investigate a new alert: ‘SOC108 — Malicious Remote Access Software Detected.’ from LetsDefend SOC…

Post Compromise AD Attack

🔗 Meet URLShort: The Ultimate URL Shortener, Fuzzer & Payload Injector for Bug Bounty Hunters & Devs

During routine security reconnaissance on public-facing academic domains, I discovered an Open Redirect vulnerability on a subdomain…

BFScan is a powerful tool to extract URLs, paths, and secrets from JAR, WAR, and APK files, generating raw HTTP requests and OpenAPI specs for security analysis.

Before discussing different tools that are necessary for the URL analysis, I just want you to walk through the basic anatomy of URL.

Hallo CyberExplorer . . . . . .

Chrome for iOS now offers enhanced data separation for work and personal Google accounts, alongside new Enterprise controls like URL filtering and audit log streaming for IT.

In today’s digital threat landscape, malicious URLs are among the most commonly used weapons in phishing, malware delivery, and…

A new report reveals a rise in phishing campaigns that abuse email marketing platforms and cloud services to evade detection and steal credentials from victims.

A decade-old browser flaw, "BiDi Swap," allows attackers to craft deceptive URLs for phishing. The bug, found by Varonis, exploits mixed-text direction.

Introduction

This article is written to raise awareness about the growing threats of cybersecurity and how one small click can sometimes lead to big…

The Apache Software Foundation has released multiple security patches for Apache Tomcat, addressing three newly disclosed vulnerabilities — CVE-2025-55752, CVE-2025-55754, and CVE-2025-61795 — aff…

Palo Alto patched a DoS flaw (CVE-2025-4619) in PAN-OS. An unauthenticated attacker can remotely reboot the firewall if URL proxy or decryption policies are enabled.

PHP 8.5 brings major updates, including the long-awaited Pipe operator for cleaner code chaining and a new URL library for standards-compliant, reliable data handling.

This lab contains an XSS vulnerability that is not directly exploitable due to browser URL-encoding.To solve the lab, take advantage of the…