ctp

ctp
22 posts
Server Side Request Forgery
Against Back-End System
Oct 27, 20243 min read
Server Side Request Forgery
Intro: This vulnerability allows an attacker to force the server side of a web application to make requests to normally unauthorized locations. Brief: This attack occurs when an attacker modifies the URL sent from a web application, which can lead to...
Sep 12, 20242 min read
2FA Simple Bypass
Intro: 2FA a.k.a 2 factor authentication is an authentication process in which a user goes through more than one type of authentication method in order to verify themselves to the system. In the case of 2FA, it is two verification methods, i.e passwo...
Aug 31, 20241 min read
Brute-forcing and Enumeration
Intro: Enumeration is a process in cybersecurity through which detailed information can be gathered about a target. Username enumeration is essentially the process of discovering valid usernames within a system or a network. The information can be ga...
Jul 19, 20242 min read
Horizontal to Vertical Privilege Escalation
Intro: This type of escalation is a combination of both horizontal, and vertical privilege escalation. First, an attacker gains access to an standard account without any administrative privileges. After accessing the standard account, the attacker wi...
Jul 16, 20242 min read
Access Control - Horizontal Privilege Escalation
An access control vulnerability when a non-administrative user can see another users personal information with similiar privileges. An example would be a user gaining access to the records of another user. Horizontal privilege escalation attacks may ...
Jul 4, 20243 min read
Parameter based Access Control
A parameter based access control is a type of access vulnerability in which an application determines the user's access right based on the on the parameter in the request. These are the: query parameters request headers cookie values Such access...
Jun 29, 20241 min read
Access Control - Unprotected Functionality
Another but less reliable way of protecting a sensitive URL is by making it unique. This means making it hard to guess. An example is as below: Such a URL can be hard to predict. However, it can be found indirectly through any JavaScript code found ...
Jun 24, 20242 min read
Access Control - Privilege Escalation Lab
Access control of an application authorizes users to access specific resources based on their user type. In web applications, access control is dependent on the following: Authentication: confirms that the user is who they say they are Session mana...
Jun 24, 20242 min read