Marduc812

A look at a code execution vulnerability in the Pake project, where a user-controlled filename in the file-download handler allows arbitrary file writes outside the Downloads directory, leading to persistence and code execution on macOS and Linux.

A CSP is the seatbelt for client-side attacks like Cross-Site Scripting and Clickjacking.

Burp Suite, our favorite proxy is used for every assessment which uses HTTP communication.

This is the third part of the Smart Contracts series where issues about smart contracts are broken into small chunks.

Smart contracts are used by Ethereum to handle processed based on transactions.

Recently I wanted to test an Android application and had to use an Android Emulator.

Burp Suite is the most used web proxy for web application assessments.

Everyone’s favorite Burp Suite, recently released their new API for interacting with Burp.

Smart Contracts, the self-executing code running on blockchain platforms, have revolutionized various industries by automating processes and providing decentralized solutions.

During a web assessment is common to find some outdated JavaScript library.