#cybersecurity-1

Articles tagged with #cybersecurity-1

Server Side Request Forgery
Against Back-End System
Oct 27, 20243 min read8
Server Side Request Forgery
Intro: This vulnerability allows an attacker to force the server side of a web application to make requests to normally unauthorized locations. Brief: This attack occurs when an attacker modifies the URL sent from a web application, which can lead to...
Sep 12, 20242 min read10
2FA Simple Bypass
Intro: 2FA a.k.a 2 factor authentication is an authentication process in which a user goes through more than one type of authentication method in order to verify themselves to the system. In the case of 2FA, it is two verification methods, i.e passwo...
Aug 31, 20241 min read7
Brute-forcing and Enumeration
Intro: Enumeration is a process in cybersecurity through which detailed information can be gathered about a target. Username enumeration is essentially the process of discovering valid usernames within a system or a network. The information can be ga...
Jul 19, 20242 min read8
Horizontal to Vertical Privilege Escalation
Intro: This type of escalation is a combination of both horizontal, and vertical privilege escalation. First, an attacker gains access to an standard account without any administrative privileges. After accessing the standard account, the attacker wi...
Jul 16, 20242 min read4
Access Control - Horizontal Privilege Escalation
An access control vulnerability when a non-administrative user can see another users personal information with similiar privileges. An example would be a user gaining access to the records of another user. Horizontal privilege escalation attacks may ...
Jul 4, 20243 min read5