Unauthorized Privilege Escalation Vulnerability via Role ManipulationPrivilege escalation vulnerabilities pose a serious threat in many applications, allowing unauthorized users to gain access to higher-level permissions. One such vulnerability is "Unauthorized Privilege Escalation via Role Manipulation." This issue a...Sep 7, 2024 · 4 min readchiomaibeakanma.hashnode.dev
Exploiting Weak JWT HMAC Secrets: From Account Takeover to Admin Privilege EscalationWeak JWT HMAC secrets are like leaving your front door key under the mat—easy for attackers to find and exploit. In today’s applications, JWTs are everywhere, handling everything from logging in users to securing API calls. But when those tokens are ...Sep 1, 2024 · 5 min readchiomaibeakanma.hashnode.dev
Account Takeover via Password Reset (Disclosed Tokens)Account takeover (ATO) vulnerabilities occur when an attacker gains unauthorized access to a user's account. One common vector for ATO vulnerabilities is through the password reset functionality. In this article, we will explore how vulnerabilities c...Aug 15, 2024 · 2 min readchiomaibeakanma.hashnode.dev
Portswigger Lab: Exploiting LLM APIs with Excessive Agency.Excessive Agency is the 8th of the OWASP Top Ten LLM vulnerabilities. Every LLM-based system has a degree of agency granted by its developer. According to OWASP, Excessive Agency is the vulnerability that enables damaging actions to be performed in r...Mar 19, 2024 · 2 min readchiomaibeakanma.hashnode.dev
JANGOW: 1.0.1 Walkthrough | VulnhubJangow is a box on Vulnhub that is centered on enumeration. Enumeration is a very important step in penetration testing. Enumeration is a process in pentesting where you establish an active connection with the victim and try to discover as many attac...Jul 7, 2022 · 7 min readchiomaibeakanma.hashnode.dev
