Mritunjay Kumar

Pinned

Exploiting Privilege Escalation to Disclose Secrets Through XXE

A series of blogs having interesting cyber security vulnerabilities. Follow Along! Overview Privilege Escalation → Username Enumeration → XXE → Directory Traversal → Configuration File Exposure Privilege Escalation As the name suggests, privilege escalation occurs when a user is able to access information / functionality which he is not supposed to access by…

Xxe

5 min read

Exploiting Privilege Escalation to Disclose Secrets Through XXE

Xxe

5 min read

Mar 5

Malware Analysis: The Dissection and Detection

We will be going through the methodology to dissect a Malware and create a detection mechanism for it. The objective of this blog is to shed some light on the Malware Analysis methodology and create a YARA rule to detect its presence. Tools Used: CFF Explorer ExeinfoPE PEStudio YARA The…

Malware Analysis

4 min read

Malware Analysis

4 min read

Mar 2

Denial of Service: Creating Mayhem was never so Easy

In this blog, I will be talking about a very critical vulnerability in the authentication mechanism of a web application that leads to Denial of Service (DOS). A Denial of Service, as the name suggests is a scenario where a service becomes unavailable for a legitimate user. The reason could…

Bug Bounty

4 min read

Denial of Service: Creating Mayhem was never so Easy

Bug Bounty

4 min read

Mar 1

Authentication Bypass and SQL Injection

A series of blogs having interesting and impactful cyber security vulnerabilities from real world assessments as well as a testing environment. Follow along! — A web application requires a user to get authenticated in order to maintain his session, this is similar to how you login to your Facebook or Instagram account. The login functionality has its fair share of weaknesses and flaws that gives a malicious minded user (attacker) an opportunity to attack…

Cyber Security Training

5 min read

Cyber Security Training

5 min read