RRyangombeinryangombe.hashnode.dev·Sep 3, 2025 · 8 min readDNSSEC Testing Guide for Penetration TestersTable of Contents What is DNSSEC? Why DNSSEC Matters in Pentesting How DNSSEC Works DNSSEC Record Types Testing for DNSSEC Common DNSSEC Misconfigurations Attack Scenarios Reporting Guidelines Tools and Commands Reference What is DNSSEC? D...00
RRyangombeinryangombe.hashnode.dev·Jul 29, 2025 · 4 min readXHR Context XSSIntroduction I've encountered countless scenarios where promising XSS vectors seemed to fail mysteriously. One of the most deceptive situations involves XHR (XMLHttpRequest) endpoints that appear vulnerable in isolation but require specific applicati...00
RRyangombeinryangombe.hashnode.dev·Jul 23, 2025 · 5 min readSolving PortSwigger Labs: CORS vulnerability with trusted null originIntroduction Cross-Origin Resource Sharing (CORS) vulnerabilities can take many forms, and one of the most interesting variants involves trusting the "null" origin. In this article, we'll explore the PortSwigger Web Security Academy lab "CORS vulnera...00
RRyangombeinryangombe.hashnode.dev·Jul 23, 2025 · 4 min readSolving Portswigger Labs: CORS vulnerability with basic origin reflectionIntroduction Cross-Origin Resource Sharing (CORS) vulnerabilities represent a significant security risk when misconfigured. In this walkthrough, we'll explore PortSwigger's "CORS vulnerability with basic origin reflection" lab, demonstrating how impr...00
