Introduction In the realm of cybersecurity, Common Vulnerabilities and Exposures (CVE) play a pivotal role in identifying and addressing potential threats. The practice of publicly disclosing vulnerabilities has become a standard procedure, regardless of whether they pertain to hardware or software. …

JavaScript is widely used for client side validation but nowadays also used to build servers or some backend applications. Due to which there is more probability of execution of server side pollution and enables more threats surfaces to exploit the JavaScript at runtime. Prototype pollution is basically an injection attack…

Introduction Like an SQL injection attacker able to inject code into commands for databases but here we do not use SQL queries such as MongoDB. As the name indicates “NO SQLI”, means non only SQL, databases that do not use SQL query language. Nowadays non-relational databases are growing to much popularity…

Introduction Several companies employ bug bounty programs today, presumably because it allows them to entice “excellent hackers” and “security researchers” to try their hand at hacking them. Researchers from any country can initiate this task, but they must adhere to the program’s standards if they want it to be successful. The…

Introduction Regular implementation of patch management is a necessary activity. The goal of this practice is to keep an organization’s software and operating system versions up-to-date and secure against known vulnerabilities. …

Introduction Cybercriminals employ this method to circumvent security measures. With the help of the DNS protocol, the attacker in this case was able to send data that has nothing to do with DNS queries or responses. …

It is necessary to implement the AD with security best practices, and doing so is beneficial in controlling the integrity, confidentiality, and availability of the organization’s assets, which include data. As we did in the last blog, in which we described the significance of active directory, we are going to…

Introduction Microsoft’s directory service, Active Directory, is among the best in the industry. The vast majority of businesses rely on it as a single location from which to access and update data on networked things. Active Directory (AD) is in charge of, or is primarily used for, user and computer authentication…

Introduction As a result, an attack group comprises a service or trusted entity in order to breach an organization’s security and access its internal systems. Consider a company that relies heavily on internal development and uses a GIthub repo. When creating websites, most programmers use this framework. Each repository contains its…