Prathapachandran_v

Prathap

Prathap

Co-founder, Director

Prathap has around 20 years of experience and has worked on various projects in leading companies like Hitachi, Toshiba, Schneider Electric, ABB, Panasonic, and MicroFuzzy. His expertise lies in architecting, designing, and developing secure projects covering various aspects of software development, processes, and methodology.

All of Prathap's posts

Cookie session without a secure flag

Cookie session without a secure flag

Co-founder, Director

WordPress arbitrary file upload

WordPress arbitrary file upload

Co-founder, Director

Ansible Configuration Exposure

Ansible Configuration Exposure

Co-founder, Director

Phpinfo() PHP Magic Quotes Gpc is On

Phpinfo() PHP Magic Quotes Gpc is On

Co-founder, Director

Modern TLS compatibility

Modern TLS compatibility

Co-founder, Director

X-XSS-protection header disabled

X-XSS-protection header disabled

Co-founder, Director

The DROWN attack

The DROWN attack

Co-founder, Director

Cross Site Scripting

Cross Site Scripting

Co-founder, Director

WordPress Authenticated JavaScript File Upload

WordPress Authenticated JavaScript File Upload

Co-founder, Director

Insecure FrontPage extension configuration

Insecure FrontPage extension configuration

Co-founder, Director

X-XSS-Protection header invalid

X-XSS-Protection

X-XSS-Protection header invalid

Co-founder, Director

Renegotiation allowing to insert data into HTTPS sessions

Renegotiation allowing to insert data into HTTPS sessions

Co-founder, Director

HTTP Strict Transport Security (HSTS) header on the invalid certificate chain

HTTP Strict Transport Security (HSTS) header on the invalid certifi...

Co-founder, Director

Cross-Origin Resource Sharing implemented with universal access

Cross-Origin Resource Sharing implemented with universal access

Co-founder, Director

Content Security Policy implemented with unsafe inline

Content Security Policy

Content Security Policy implemented with unsafe inline

Co-founder, Director

Fingerprinting Web Server

Fingerprinting Web Server

Co-founder, Director

TLS Internet Explorer compatibility

TLS Internet Explorer compatibility

Co-founder, Director

Smugmug Takeover Detection

Smugmug Takeover Detection

Co-founder, Director

Nextjs v2.4.1 LFI

Nextjs v2.4.1 LFI

Co-founder, Director

Netrc Config File

Netrc Config File

Co-founder, Director

Intercom Takeover Detection

Intercom Takeover Detection

Co-founder, Director

EEA Information Disclosure

EEA Information Disclosure

Co-founder, Director

Apache Struts RCE

Apache Struts RCE

Co-founder, Director

TerraMaster TOS v4.1.24 RCE

TerraMaster TOS v4.1.24 RCE

Co-founder, Director

Drupal Drupalgeddon 2 RCE

Drupal Drupalgeddon 2 RCE

Co-founder, Director

Cockpit prior to 0.12.0 NoSQL injection in /auth/resetpassword

Cockpit prior to 0.12.0 NoSQL injection in /auth/resetpassword

Co-founder, Director

Apache tika 1.15-1.17 header command injection

Apache tika 1.15-1.17 header command injection

Co-founder, Director

WeiPHP 5.0 Path Traversal

WeiPHP 5.0 Path Traversal

Co-founder, Director

ThinkPHP 5.0.23 RCE

ThinkPHP 5.0.23 RCE

Co-founder, Director

Samsung Wlan AP (WEA453e)RCE

Samsung Wlan AP (WEA453e)RCE

Co-founder, Director

Openfire Full Read SSRF

Openfire Full Read SSRF

Co-founder, Director

ElasticSearch 1.4.0/1.4.2 RCE

ElasticSearch 1.4.0/1.4.2 RCE

Co-founder, Director

Apache Solr 8.3.0 - Remote Code Execution via Velocity Template

Apache Solr 8.3.0 - Remote Code Execution via Velocity Template

Co-founder, Director

Vulnerable Javascript Library

Vulnerable Javascript Library

Co-founder, Director

Insecure File Upload

Insecure File Upload

Co-founder, Director

SMBGhost Vulnerability (CVE-2020-0796)

SMBGhost Vulnerability (CVE-2020-0796)

Co-founder, Director

PHP-FPM Vulnerability (CVE-2019-11043) with NGINX

PHP-FPM Vulnerability (CVE-2019-11043) with NGINX

Co-founder, Director

Transport Layer Security

Transport Layer Security

Co-founder, Director

Intelligent Security Testing

Intelligent Security Testing

Co-founder, Director

Test For Checking Magic Quotes Gpc is On

Test For Checking Magic Quotes Gpc is On

Co-founder, Director

PHP session.hash_function is MD5

PHP session.hash_function is MD5

Co-founder, Director

PHP cURL Security Bypass

PHP cURL Security Bypass

Co-founder, Director

Joomla common log files

Joomla common log files

Co-founder, Director

Joomla admin page

Joomla admin page

Co-founder, Director

Joomla User Registration Process

Joomla User Registration Process

Co-founder, Director

Joomla Debug Mode status

Joomla Debug Mode status

Co-founder, Director

Joomla Core vulnerability

Joomla Core vulnerability

Co-founder, Director

WordPress Cross-Site Scripting

WordPress Cross-Site Scripting

Co-founder, Director

Ghostcat Vulnerability (CVE-2020–1938)

Ghostcat Vulnerability (CVE-2020–1938)

Co-founder, Director

Document Object Model Cross Site Scripting on WordPress

Document Object Model Cross Site Scripting on WordPress

Co-founder, Director

Authentication Bypass and Stored Cross Site Scripting

Authentication Bypass and Stored Cross Site Scripting

Co-founder, Director

Redirects to HTTPS eventually, but initial redirection is to another HTTP URL

Client Side URL Redirect

Redirects to HTTPS eventually, but initial redirection is to anothe...

Co-founder, Director