Practical content from industry professionals on digital forensics · data recovery · cyber security · KVKK compliance.
Insecure deserialization is when untrusted serialized data is turned into an object, letting the attacker change app behavior and run code. How it works, why it leads to RCE, signature and type allow list defense, detection with KAOS.
Read moreXXE is when an application processes XML insecurely, letting the attacker read server files, scan the internal network and sometimes run code. How it works, a types table, disabling external entities and DTD, scanning with KAOS and FAQs.
Read moreBusiness logic flaws arise from abusing business rules without a technical code error: negative quantity, step skipping, race conditions, price tampering. Why they are the class automated scanners miss most, defense and using KAOS with expert intelligence together.
Read moreClickjacking is embedding a trusted site into an invisible frame and making the user act on it unknowingly. How it works, a types table, X-Frame-Options and CSP frame-ancestors defense, security header scanning with KAOS and FAQs.
Read moreSecurity misconfiguration is vulnerabilities from insecure settings, not code: default passwords, exposed panels, leaking errors, unpatched components. A table of common misconfigurations, secure default defense and continuous scanning with KAOS.
Read morePath traversal is when an unchecked file name lets the attacker reach unauthorized files, and via LFI can lead to code execution. How it works, a table of LFI and RFI, why filtering is not enough, allow list defense and scanning with KAOS.
Read moreCommand injection is when user input passes unsafely into an OS command, letting the attacker run commands on the server, leading to remote code execution (RCE). Types, parameterized call and allow list defense, detection with KAOS and FAQs.
Read moreMalware analysis is understanding what a suspicious file does and how far it spread, in a controlled environment. A table of static, dynamic, sandbox and reverse engineering approaches, a safe analysis environment and connecting to defense with IOCs.
Read morePassword cracking is finding the password that produces a given hash. Why a hash can be cracked, a table of dictionary and rule based methods, Hashcat and John the Ripper, defense with Argon2 bcrypt and salt, and FAQs.
Read moreA JWT is a portable identity token signed by the server; if misconfigured, an attacker can craft their own. alg none, missing signature checks, key confusion and weak key attacks, the logout problem and a secure JWT checklist.
Read moreIDOR is accessing another person's data by changing an identifier, and is a subtype of Broken Access Control, number one on the OWASP Top 10. Types, how it is found, the UUID misconception, server side authorization and proper defense.
Read moreCSRF is a web flaw that tricks the browser of a logged in user into sending requests on their behalf. How it works, a table comparing it with XSS, SameSite cookie and CSRF token defenses, common mistakes and how to test it.
Read more