InfoSec Write-ups - Medium-- Open Redirects are Unvalidated redirects and forwards that are possible when a web application accepts untrusted input that could cause the web application to redirect the request to a URL contained within untrusted input. By modifying untrusted URL input to a malicious site, an attacker may successfully launch a phishing scam … Continue reading Open Redirects & bypassing CSRF validations- Simplified

InfoSec Write-ups - Medium-- Hello researchers and bug hunters! Recently I found an interesting attack vector which I would like to share with you. Without losing time, let’s jump into it.Visiting the website (port 443), we see this webpage:/index.phpFinding LFI vulnerabilityLet’s browse through the website to see if we can find any interesting endpoint. Clicking to Contact … Continue reading Leveraging LFI to RCE in a website with +20000 users

InfoSec Write-ups - Medium-- Hack the Box — Blackfieldhttps://www.hackthebox.eu/home/machines/profile/255Blackfield is a 40-point machine from Hack the Box which requires you to exploit mistakes done after a recent computer forensic investigation recently done on the machine. The files left valuable information about the machine, usually extracted when doing computer forensics, which includes a dump of LSASS. Gaining access … Continue reading Hack the Box — Blackfield

InfoSec Write-ups - Medium-- Kerberos Protocol | Linux | Active Directory Domain (AD Domain)Continue reading on InfoSec Write-ups » View original article on InfoSec Write-ups - Medium