What is JWT? For those who are not familiar with JSON tokens, it’s a method to securely exchange data, especially an LFI attack in which the application uses a JSON object. The purpose of the method is to be used

Continue ReadingHack The Box: (Awkward) To retrieve an LFI with JWT token

What is Path Hijacking? Path Hijacking is a method where the bad guys will try to execute their malicious payload by running it from a different path than they are in at that moment. Let’s look at it this way

Continue ReadingHack the Box: (Photobomb machine) – Path Hijacking

What is Misconfiguration? Security misconfiguration is a vulnerability that normally happens when the application especially a web page because the developer didn’t configure the website properly and exposes it to insecure configuration options. It’s a configuration weakness that normally existed

Continue ReadingLearning Series: Misconfiguration Mistakes on the application