Most people think client-side encryption protects the data. It doesn’t, at least not from someone with coding skill, a Burpsuite, and some determination. On my recent "wandering in the wild", I'm facing a web app that encrypts all the request parameters to the server. As
Disclaimer: the demonstrated website has been recreated by my own self-hosted server to reproduce the vuln to redact all the confidential parts. The vuln has been reported responsibly to the web owner. For educational purpose only It was 12 AM, a calm midnight that was soon to be a nightmare
Bagi budak korporat kayak saya, apalagi yang kerjanya mostly remote dan berjam-jam duduk, olahraga udah jadi mandatory banget supaya gak jadi jompo duluan dan pikiran tetap waras. Dari sekian banyak olahraga yang lagi hype, seperti lari, gym, bahkan padel. Saya memilih untuk olahraga beladiri. Gak cuma satu, tapi LIMA beladiri
It’s been quite a while since my last medium article. At the moment, I’m having my OffSec AWAE Lab in preparation of OffSec Web Expert…
For those who are experienced with Python 3 scripting and XXE Injection, or at least willing to learn this stuff, this is a proper machine…
Introduction