As a penetration tester and security researcher, I’ve seen my fair share of vulnerabilities. But recently, I discovered something that…

# Context

Web #1:
The first web application is vulnerable to Cross-Site Scripting (XSS) via the loan comment field, where malicious input such as…

Sherlock Scenario

Learn how to use API Governance in WSO2 API Manager 4.5.0 to block APIs with weak authentication. Secure your APIs by disabling API Key…

> About Author Hi, I’m Sharon, a product manager at Chaitin Tech. We build SafeLine, an open-source Web Application Firewall built for…

본 글은 2024년 5월 3일 발생한 Whale Wallet 해킹 사건을 중심으로, 사건 개요, 자산 유출 구조, 공격 방식, 세탁 경로, 그리고 보안 시사점을 종합적으로 분석한 기술 칼럼입니다.

By: Safa’at Dinata Putra — Versatile IT Technician

A DNS Zone Transfer (AXFR) is a mechanism used to replicate DNS databases across a set of DNS servers. It’s the process where a secondary…

How I Turned a File Read Into Full Server Control in 37 Minutes

The New Arms Race in the Digital Shadows

In the era of AI-driven social media, what you post isn’t just yours anymore, it’s data fuel.

APIs are a favorite target for automated scripts, scrapers, and bots. Whether it’s someone hammering your endpoints with curl, or a bot…

The digital landscape is rapidly expanding and evolving, presenting unprecedented challenges for traditional vulnerability assessment. As…

DevSecOps in Action: From Pre-Commit to Post-Deploy

Modern network infrastructures, characterized by their distributed nature, dynamic cloud deployments, and sophisticated threat landscape…

In an era defined by escalating cyber threats, a robust vulnerability assessment stands as an indispensable pillar of digital defense. This…

In today's interconnected digital landscape, organizations face an unrelenting barrage of sophisticated cyber threats, making the proactive…

Sherlock Scenario

When Development Tools Become Digital Trojan Horses