Application Security Testing for XPath Injections. INTRODUCTION The article describes how to test the application to find XPath Injections, which occur when a website uses user-supplied data to construct an XPath (XML Path Language) query for XML data. XPath is a query language that navigates and selects elements and attributes within…

The devil is not so black as he is painted. INTRODUCTION This is a review of the OSCE³ and Offsec at all. I made it for everyone who wonders if certificates included in OSCE³ are worth the time and money. The main question is divided into the following points: DIFFICULTY —…

Some tips about assembly and exploit development on Windows x86. INTRODUCTION The article was created for all those who asked me for some of my notes. I have paraphrased them and cut out a large part to avoid plagiarising the EXP-301 course material. There are some tips about x86 assembly and…

Setting up the environment for testing and crimson_recon explanation. INTRODUCTION It has been a couple of months since the last article about the automatization of Web Application Penetration Testing. …

Application Security Testing for LDAP Injections. INTRODUCTION The article describes how to test the application to find LDAP Injections, which happens when it uses unsanitized user input to construct LDAP queries and then send them further to the LDAP server. LDAP server uses a filter-based query syntax described in RFC 4515…

Application Security Testing for NoSQL Injections. INTRODUCTION The article describes how to test the application to find NoSQL Injection vulnerabilities in various databases that do not use SQL (Structured Query Language), such as: Key-value-oriented databases (Redis | Memcached | DynamoDB) Document-oriented databases (MongoDB | CouchDB) Wide-column-oriented database (Apache Cassandra) Graph-oriented database…

Tcache poisoning & One Gadget & __malloc_hook [x64] — This is my 11th walkthrough, referring to the methodology described here. It will be as always: concise straight to the point without the steps that lead to the rabbit hole. 0. Download the binary:

Application Security Testing for XML eXternal Entity injections. INTRODUCTION The article describes how to test the application to find XXE injection vulnerabilities. The advice in this article is based on the following: OWASP Web Security Testing Guide OWASP Application Security Verification Standard Bug bounty reports Own experience. TOOLING BURP SUITE PRO EXTENSIONS Burp Suite Professional —…

Application Security Testing for Carriage Return Line Feed injections. INTRODUCTION The article describes how to test the application to find CRLF injection vulnerabilities. The advice in this article is based on the following: OWASP Web Security Testing Guide OWASP Application Security Verification Standard Bug bounty reports Own experience. TOOLING Tools with basic…