@iPsalmy
#cybersecurity #securityresearch #AppSec #APIsecurity
Nothing here yet.
Nothing here yet.
Dec 31, 2024 · 2 min read · Hello guys! I’m here again with another vulnerability, last one for the year 2024. Let’s get started : ) Imagine trying to reset your password on one account, only to realize you’ve inadvertently gained control over another. That’s exactly what happe...
Join discussionDec 17, 2024 · 2 min read · Hello guys! I’m back again with a real-life example of how I turned a simple open redirect vulnerability into a reflected XSS exploit. At first glance, an open redirect might not seem like much of a big deal. However, when paired with the right trick...
Join discussion
Nov 28, 2024 · 2 min read · Hello guy! I’m iPsalmy. It’s been a while I wrote anything here. Anyway, with no waste of time let’s talk about how I used a simple CSRF attack to exploit a weak token management which led to me taking over users account. I tend to test on password ...
Join discussionMar 8, 2024 · 2 min read · Hey there! been a minute. In this write-up, I’ll be showing you how to set up your own metalsploitable virtual lab for web application security and penetration testing. STEP 1 First of, head to over to google and check for metasploitable 2 or visit t...
Join discussion
Feb 10, 2024 · 3 min read · Ever wondered what happens when you visit a Website or enter a URL? Well, look no further. I’ll be breaking down what happens when you enter a URL into your browsers here. Extracting the Domain Name Once you enter a URL in your browser (e.g http://ww...
Join discussion