Harsh Bothra - Defensium Labs Blog

Sign in Subscribe

Harsh Bothra

Defending from Vulnerabilities: Exploiting Object Injection for Remote Code Execution (RCE)

vulnerabilities Featured

Defending from Vulnerabilities: Exploiting Object Injection for Remote Code Execution (RCE)

Object injection occurs when user-supplied input is deserialized into an object within the application without proper validation or sanitization.

Defending from Vulnerabilities: Server-Side Template Injection (SSTI)

vulnerabilities Featured

Defending from Vulnerabilities: Server-Side Template Injection (SSTI)

SSTI can lead to severe outcomes, including remote code execution (RCE), data theft, and privilege escalation. This scenario underscores the importance of adequately handling user input, especially when using templating engines to generate content dynamically.

Defending from Vulnerabilities: Timing Attack Exploitation via Server-Side Request Forgery (SSRF)

vulnerabilities Featured

Defending from Vulnerabilities: Timing Attack Exploitation via Server-Side Request Forgery (SSRF)

In this week's series, we delve into a more sophisticated server-side attack—exploiting Server-Side Request Forgery (SSRF) using a timing attack. SSRF vulnerabilities occur when an attacker can manipulate server-side logic to make unauthorized network requests to internal or external services.

Defending from Vulnerabilities: Exploiting Payment Discounts via Logical Flaws

vulnerabilities Featured

Defending from Vulnerabilities: Exploiting Payment Discounts via Logical Flaws

The attacker manipulates the discount application by applying multiple discount codes, even though the system is supposed to allow only one. This manipulation results in an excessive discount, allowing the attacker to purchase items at a much lower price or even for free.

Defending from Vulnerabilities: Bypassing Payment Validation with Mixed Price Manipulation

Defending from Vulnerabilities: Bypassing Payment Validation with Mixed Price Manipulation

Price manipulation is not always about setting negative amounts or reduced amount which you can prevent by adding a validation. However, often the validation can be bypassed or abused by mixed price manipulations.

Defending from Vulnerabilities: Endless Redirection Loop in URL Parameters

defending Featured

Defending from Vulnerabilities: Endless Redirection Loop in URL Parameters

If the redirections are improperly handled, they often lead to open redirection attacks. However, if the number of redirection attempts is not implemented, it can cause a redirection loop, leading to an application-level denial of service and resource exhaustion attack.

Defending from Vulnerabilities: Persistent XSS via Lack of Internal Application Data Validation

vulnerabilities Featured

Defending from Vulnerabilities: Persistent XSS via Lack of Internal Application Data Validation

As a developer, you must perform input validation at each stage even if the data is already stored in the application because avoiding this could still lead to a malicious input to trigger on later interaction (second degree), causing issues like cross-site scripting (XSS).

🔌 Cyber Safety Tip of the Week: Avoid Using Public USB Charging Stations! ⚠️📱

Tip of the Week

🔌 Cyber Safety Tip of the Week: Avoid Using Public USB Charging Stations! ⚠️📱

Public USB charging stations, often found in airports, hotels, and other public places, might seem convenient, but they can pose serious security risks. Cybercriminals can tamper with these stations to install malware on your device or steal your data in a practice known as "juice jacking."

Defending from Vulnerabilities: Unauthorized File Upload via Undocumented PUT Method

vulnerabilities Featured

Defending from Vulnerabilities: Unauthorized File Upload via Undocumented PUT Method

Publishing the undocumented APIs in an externally facing environment could allow attackers to find and use the undocumented method maliciously.

Defending from Vulnerabilities: Bypass in Password Change Functionality

defending Featured

Defending from Vulnerabilities: Bypass in Password Change Functionality

Password changes and updates after authentication are common functionalities found in most applications. While each application implements them differently, it is essential to ensure they are securely implemented.

Unveiling the CVE-2024–6387: OpenSSH 'RegreSSHion' Vulnerability

vulnerabilities Featured

Unveiling the CVE-2024–6387: OpenSSH 'RegreSSHion' Vulnerability

CVE-2024-6387 is a critical vulnerability in OpenSSH versions 8.5p1 to 9.8p1 on glibc-based Linux systems. It stems from a race condition in the signal handler, allowing remote attackers to execute arbitrary code as root, leading to complete system compromise.

Defending from Vulnerabilities: CSRF Bypass via Method Change

defending Featured

Defending from Vulnerabilities: CSRF Bypass via Method Change

In the first week of the series, we delve into a specific CSRF (Cross-Site Request Forgery) attack scenario and understand how you could have identified and remediated while developing your application.

Cyber Security Word of the Week: Whaling! 🐳

Word of the week

Cyber Security Word of the Week: Whaling! 🐳

A Giant Company Lost $2 Million! In a recent incident, a well-known tech company fell victim to a whaling attack. Cyberto criminals impersonated the CEO and convinced a finance executive to transfer $2 million to an offshore account. This attack not only resulted in a substantial financial loss but also

Cyber Safety Tip of the Week: Beware of Typosquatting ⚠️

Tip of the Week

Cyber Safety Tip of the Week: Beware of Typosquatting ⚠️

"google.com" vs "google.corn", the difference between them is very small but if not paid attention, the consequences are large to pay. This is what happened to a popular bank recently👇 A typosquatting domain mimicked the bank’s online banking service and tricked thousands of