Hi there!
I spent some time trying to find out the bugs in the sites which I mostly use like Swiggy, Paytm, and on Bugv platform. I was mostly looking for the vulnerabilities like SQLi, XSS, XXE, SSRF, etc. and couldn’t not able to find a vulnerability that was of high impact or critical.
Hi there!,
This is the Fifth topic in this series. You can have a look at other topics also for getting a better idea about the series and the pattern.
Fifth Topic - Authentication and Authorisation As I started exploring these topics in detail, I mostly focused on two widely used standard which is SAML and OAuth 2.
Hi there!,
This is the fourth topic in this series. You can have a look at other topics also for getting a better idea about the series and the pattern.
Fourth Topic - NoSql Injection Resources https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05.6-Testing_for_NoSQL_Injection
(Owasp Ref) https://www.netsparker.com/blog/web-security/what-is-nosql-injection/ (NetSparker Blog) https://geekflare.
Hi there!,
I had solved Portswigger Labs and had an basic idea on XSS.
This time, I wanted to learn advanced way of exploiting XSS.
This blog contains the references for the same.
Topic - XSS Labs/Challenges https://xss.pwnfunction.com/
(Nice challenges by @Pwnfuncton)
Hi there!,
This is the third topic in this series. You can have a look at other topics also for getting a better idea about the series and the pattern.
Third Topic - SQL Injection I had already completed the portswigger labs and looked into many challenges of Audi Labs.