We’ll explore what SSRF is, how to test for it and how to secure applications against it.
Today marks the start of a new series to help bridge the gap between development and security. I’ll cover web
On June 9th, 2020, I received one of the worst notifications of my life: a $1,000 transaction had been made
On Feb 3rd, I was honored to have received the PNPT. It took several months of hard work to obtain
Executive Summary Active is an easy-level Windows machine. In this black-box engagement, we start by enumerating an SMB share we
Executive Summary In this engagement, we accessed a network with three machines. Starting by exploiting a known vulnerability in a
Executive Summary Sau is an easy-level Linux machine exploiting web vulnerabilities like command injection and SSRF. Leveraging CVE-2023-27163 in the
Executive Summary Broker is an easy-level Linux machine that utilizes CVE-2023-46604, a Java deserialization vulnerability leading to remote code execution