OTP Bypass Through Response ManipulationHello everyone, This is my first report. I am sure everyone will be aware of the first P1 vulnerability which is the most invisible of all(the strike of duplicates and not applicable). This Report is all about a beginner who gets a lot of Duplicates,...Dec 11, 2022·3 min read
The Story Of How I Bypass SSO LoginHello everyone, I decided to tell you my stories about offensive security. This is the first story I share on my blog. Hope it will be a good start. In these stories, of course, I can not give the company names but I will tell you how it happened and...Dec 7, 2022·2 min read
Awkward: Hack The Box [HTB] WriteupIntroduction: Hi all! In this article I’m going to be tackling Awkward, a medium difficulty Linux machine on hackthebox.com. Happy hacking! Information Gathering: Let’s get started with an nmap scan. You know the drill: We can see in the scan output...Dec 6, 2022·8 min read
DNS Security: How The Phone Book Of The Internet Stays SafeIntroduction Greetings earthlings! In this article, I will be discussing about DNS security (Domain Name System). We will see What is DNS? What are the different DNS vulnerabilities and attack vectors? How do we secure DNS? How DNS can be a secur...Dec 3, 2022·5 min read
How You Can Create a GUI Password Generator in PythonHi readers! Here is another simple tutorial that will teach you how to create another real-life use script! In this tutorial, we’ll be building a password generator with GUI using python and Tkinter. This is a great project for beginners because it’s...Dec 3, 2022·5 min read
Hack The Box [HTB] Writeup: PreciousHack the Box released a new machine this weekend called Precious and I was excited to get my hands on it. Precious is an easy-rated Linux machine. I found it pretty straightforward and would say that it's a good beginner-friendly machine. Happy hacki...Dec 2, 2022·4 min read
Broken Access Control + Misconfiguration = Beautiful Privilege EscalationHello everyone, This story will be about the Privilege escalation vulnerability I found lately. There are 2 roles on this site creator/account owner Account owner user is the management and is able to access the full account users and other function...Dec 2, 2022·3 min read