#pentesting

Articles tagged with #pentesting

Broken Access Control Using the Referer Header
NOTE: This post is for educational purposes only. Please use the information responsibly and legally. While analyzing a request to /index.php, I noticed that it included a Referer header,This made me curious why a simple GET request depended on a Ref...
Dec 16, 20252 min read14
Command Injection via Argument Injection
NOTE: This post is for educational purposes only. Please use the information responsibly and legally. Summary A command injection vulnerability was identified on example.com, where user-controlled input was passed directly into an operating system c...
Dec 15, 20252 min read25