Collaborate Disseminate
Software and web developers, owners of the latest IOT gadgets and people who just like to surf the web at home have one thing in common, they are all protected by a firewall.
Businesses typically protect their networks with hardware, dedicated and robu… Continue reading Vulnerable Web Applications on Developers Computers Allow Hackers to Bypass Corporate Firewalls
In February 2017 a number of Google Engineers created the first SHA-1 collision. Even though this hashing algorithm has already been marked as deprecated by NIST in 2011, it is still widely used.
What are Hash Collisions?
A hash collision happen… Continue reading Collision Based Hashing Algorithm Disclosure
There are two different kinds of web application vulnerability scanners; heuristic and signature based scanners. This article explains how both types of scanners work and what type of vulnerabilities they can find in web applications.
How Do Signature … Continue reading The Advantage of Heuristic Over Signature Based Web Vulnerability Scanners
The web would not be as we know it today if it was not possible for a website to request data from another. A few examples; pictures which are fetched from another website, scripts files that are saved on CDNs and frames pointing to another domain, lik… Continue reading What is a Cross-Site Request Forgery Attack & How to Prevent It
CubeCart is an open source ecommerce web application that enables shop owners to manage and list their products on their online shop and website. The first version of CubeCart was released in 2003 and since then it has been installed on tens of thousan… Continue reading XSS, CSRF & Other Vulnerabilities in CubeCart Web Application
An Open Redirection is when a web application or server uses a user submitted link to redirect the user to a given website or page. Even though it seems like a harmless action, to let a user decide on which page he wants to be redirected to, if ex… Continue reading What is an Open Redirection Vulnerability and How to Prevent it?
It was one of those lazy evenings, just watching TV after a long day. I was tired but kept on thinking about a vulnerability I found earlier on in a router someone gave me. Finding a flaw in such a device is always quite fun because you often see thing… Continue reading How I Hacked my Smart TV from My Bed via a Command Injection
Introduction to the Remote File Inclusion
A remote file inclusion (also known as RFI) occurs when a file from a remote server is included into a web page. Such behaviour can be developed on purpose on web applications, for example to show content … Continue reading Open Redirection Vulnerability Information & Prevention
In the early days of the internet building websites was very simple; no JavaScript and no CSS and a few pictures. But as the web grew more popular the need for more advanced technology and dynamic websites arose. This lead to the development of CGI and… Continue reading What is the SQL Injection Vulnerability & How to Prevent it?
Missing Function Level Access Control vulnerabilities are listed as the 7th most popular vulnerabilities in the OWASP top 10 of 2013. You might have never heard the name before, but most probably you are familiar with the concept: If a user shouldn&rsq… Continue reading Missing Function Level Access Control Vulnerabilities in Maian Support Helpdesk Allow Complete Take Over of the System