Showing posts from March, 2020Show all
March 08, 2020
Session Vulnerabilities
Nirav Gadhiya - Security Analyst

Session Fixation

What is Session Fixation? Session Fixation is used by an attacker when it is not possible to steal the session_id. Session Fixation allows an attacke…

March 03, 2020
Session Vulnerabilities
Nirav Gadhiya - Security Analyst

Session Hijacking

What is Session Hijacking? Session Hijacking is an attack that can be performed by exploiting some vulnerabilities. Session_Token and Session_Id are …

March 03, 2020
Command Injection
Nirav Gadhiya - Security Analyst

Command Injection

What is Command Injection? Command Injection which is also known as OS Command Injection or Shell Injection is a vulnerability with very high severit…

March 03, 2020
LDAP Injection
Nirav Gadhiya - Security Analyst

LDAP Injection

What is LDAP? LDAP is a Lightweight Directory Access Protocol which is used by LDAP servers to store, retrieve and manage the data. LDAP communicates…

March 01, 2020
XSS
Nirav Gadhiya - Security Analyst

DOM Based Cross-Site Scripting

What is DOM Based Cross-Site Scripting? When an application uses javascript which accepts data from unknown or un-sanitized sources like GET url and …

March 01, 2020
XSS
Nirav Gadhiya - Security Analyst

Reflected Cross-Site Scripting

What is Reflected Cross-Site Scripting? Unlike stored XSS, Reflected XSS does not store the payload to the database. An attacker can use the GET para…