Back
 

Latest articles

Stay up-to-date with the most recent insights and developments in the world of application security. Our latest articles cover cutting-edge techniques, emerging threats, and innovative solutions to help you fortify your applications.
X-frames options header cannot be recognized
Vulnerability
02 May 2024
X-frames options header cannot be recognized
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Revealing phpinfo()
Vulnerability
30 Apr 2024
Revealing phpinfo()
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
ThinkCMF-LFI vulnerability
Vulnerability
29 Apr 2024
ThinkCMF-LFI vulnerability
Febna V M
Febna V M
Cyber Security Engineer
Captcha image detected
Vulnerability
25 Apr 2024
Captcha image detected
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Apache Tomcat Remote Code Execution (RCE)
Vulnerability
24 Apr 2024
Apache Tomcat Remote Code Execution (RCE)
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Uncommon query string parameter
Vulnerability
23 Apr 2024
Uncommon query string parameter
Rejah Rehim
Rejah Rehim
Co-founder, Director
Unsecured HTTPS cookies
Vulnerability
22 Apr 2024
Unsecured HTTPS cookies
Rejah Rehim
Rejah Rehim
Co-founder, Director
Apache Struts 2 S2 –008 RCE1
Vulnerability
19 Apr 2024
Apache Struts 2 S2 –008 RCE1
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
How to integrate DAST into your GitLab CI/CD pipeline?
DevSecOps
18 Apr 2024
How to integrate DAST into your GitLab CI/CD pipeline?
Neda Ali
Neda Ali
Product Marketing Specialist
X-XSS-protection header disabled
Vulnerability
18 Apr 2024
X-XSS-protection header disabled
Prathap
Prathap
Co-founder, Director
Browser exploit against SSL/TLS (BEAST attack)
Vulnerability
16 Apr 2024
Browser exploit against SSL/TLS (BEAST attack)
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Invalid certificate chain encountered during redirection
Vulnerability
16 Apr 2024
Invalid certificate chain encountered during redirection
Febna V M
Febna V M
Cyber Security Engineer
X-Frame options header not implemented
Vulnerability
15 Apr 2024
X-Frame options header not implemented
Rejah Rehim
Rejah Rehim
Co-founder, Director
Credit card number disclosure
Vulnerability
10 Apr 2024
Credit card number disclosure
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Application error disclosure
Vulnerability
08 Apr 2024
Application error disclosure
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Brute force in IIS
Vulnerability
07 Apr 2024
Brute force in IIS
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
What are the most common use cases of AI and ML?
AI
04 Apr 2024
What are the most common use cases of AI and ML?
Neda Ali
Neda Ali
Product Marketing Specialist
Common gateway interface vulnerability
Vulnerability
02 Apr 2024
Common gateway interface vulnerability
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Bash command injection
Vulnerability
01 Apr 2024
Bash command injection
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Potential web backdoor
Vulnerability
27 Mar 2024
Potential web backdoor
Febna V M
Febna V M
Cyber Security Engineer
Directory traversal attacks
Vulnerability
26 Mar 2024
Directory traversal attacks
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
XML external entity injection
Vulnerability
19 Mar 2024
XML external entity injection
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
SSL compression methods
Vulnerability
18 Mar 2024
SSL compression methods
Febna V M
Febna V M
Cyber Security Engineer
User information disclosure
Vulnerability
11 Mar 2024
User information disclosure
Febna V M
Febna V M
Cyber Security Engineer
What is GDPR?
Compliance
04 Mar 2024
What is GDPR?
Neda Ali
Neda Ali
Product Marketing Specialist
Source code disclosure
Vulnerability
18 Feb 2024
Source code disclosure
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
OWASP Top 10 for mobile applications 2024
owasp
12 Feb 2024
OWASP Top 10 for mobile applications 2024
Neda Ali
Neda Ali
Product Marketing Specialist
Remote OS Command injection
Vulnerability
08 Feb 2024
Remote OS Command injection
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Memcached Injection
Vulnerability
07 Feb 2024
Memcached Injection
Febna V M
Febna V M
Cyber Security Engineer
Lack of HTTP Strict Transport Security (HSTS)
Vulnerability
01 Feb 2024
Lack of HTTP Strict Transport Security (HSTS)
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Insecure RIA cross domain policy
Vulnerability
31 Jan 2024
Insecure RIA cross domain policy
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Buffer overflow vulnerability
Vulnerability
30 Jan 2024
Buffer overflow vulnerability
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
GraphQl attacks and vulnerabilities
AppSec
Vulnerability
09 Jan 2024
GraphQl attacks and vulnerabilities
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
GraphQl attacks and vulnerabilities
AppSec
Vulnerability
09 Jan 2024
GraphQl attacks and vulnerabilities
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Full path disclosure (FPD) vulnerability
Vulnerability
28 Dec 2023
Full path disclosure (FPD) vulnerability
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Logjam attack against the TLS protocol
Vulnerability
26 Dec 2023
Logjam attack against the TLS protocol
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Private IP address disclosure
Vulnerability
26 Dec 2023
Private IP address disclosure
Febna V M
Febna V M
Cyber Security Engineer
What is authenticated vulnerability scanning?
AppSec
19 Dec 2023
What is authenticated vulnerability scanning?
Neda Ali
Neda Ali
Product Marketing Specialist
Disabling executable handling in PHP with disable_function
Vulnerability
12 Dec 2023
Disabling executable handling in PHP with disable_function
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Cross-site tracing (XST) vulnerability
Vulnerability
11 Dec 2023
Cross-site tracing (XST) vulnerability
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Email address disclosure
Vulnerability
06 Dec 2023
Email address disclosure
Febna V M
Febna V M
Cyber Security Engineer
Why DAST needs reinvention?
AppSec
04 Dec 2023
Why DAST needs reinvention?
Neda Ali
Neda Ali
Product Marketing Specialist
Domain spoofing: Types and how to prevent them
Cyber attacks
28 Nov 2023
Domain spoofing: Types and how to prevent them
Gincy Mol A G
Gincy Mol A G
AI Engineer
The DROWN attack
Vulnerability
28 Nov 2023
The DROWN attack
Prathap
Prathap
Co-founder, Director
Remote file inclusion
Vulnerability
27 Nov 2023
Remote file inclusion
Febna V M
Febna V M
Cyber Security Engineer
Authenticated vs unauthenticated scans
AppSec
21 Nov 2023
Authenticated vs unauthenticated scans
Neda Ali
Neda Ali
Product Marketing Specialist
What is SaaS penetration testing?
AppSec
16 Nov 2023
What is SaaS penetration testing?
Neda Ali
Neda Ali
Product Marketing Specialist
Eval injection
Vulnerability
14 Nov 2023
Eval injection
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Virtual hosts vulnerability
Vulnerability
14 Nov 2023
Virtual hosts vulnerability
Febna V M
Febna V M
Cyber Security Engineer
Secrets at the Command Line
Secrets Management
13 Nov 2023
Secrets at the Command Line
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
DevSecOps Vs SecDevOps
DevSecOps
12 Nov 2023
DevSecOps Vs SecDevOps
Neda Ali
Neda Ali
Product Marketing Specialist
Secrets in Terraform
Secrets Management
08 Nov 2023
Secrets in Terraform
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Secrets in Jenkins
Secrets Management
08 Nov 2023
Secrets in Jenkins
Adheeb A
Adheeb A
DevSecOps Engineer
What is HTTP Response Header Injection?
Vulnerability
08 Nov 2023
What is HTTP Response Header Injection?
Neda Ali
Neda Ali
Product Marketing Specialist
Insecure Redirection
Vulnerability
08 Nov 2023
Insecure Redirection
Neda Ali
Neda Ali
Product Marketing Specialist
What is Shellshock vulnerability?
Vulnerability
08 Nov 2023
What is Shellshock vulnerability?
Neda Ali
Neda Ali
Product Marketing Specialist
Secrets in Kubernetes
Secrets Management
07 Nov 2023
Secrets in Kubernetes
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Secrets in AWS
Secrets Management
07 Nov 2023
Secrets in AWS
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
How to handle secrets in Python?
Secrets Management
07 Nov 2023
How to handle secrets in Python?
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
How to handle secrets in docker?
Secrets Management
06 Nov 2023
How to handle secrets in docker?
Febna V M
Febna V M
Cyber Security Engineer
A guide to Secrets operations (SOPS)
Secrets Management
06 Nov 2023
A guide to Secrets operations (SOPS)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Broken Access Control
owasp
20 Oct 2023
Broken Access Control
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
ROBOT Attack (Breitenbacher RSA)
SSL
20 Oct 2023
ROBOT Attack (Breitenbacher RSA)
Nikhil Anilkumar
Nikhil Anilkumar
DevSecOps Engineer
Format String Vulnerability
Vulnerability
20 Oct 2023
Format String Vulnerability
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
What is phishing and how to stay safe?
Phishing
04 Oct 2023
What is phishing and how to stay safe?
Neda Ali
Neda Ali
Product Marketing Specialist
DOME CTF: Boosting ethical hacking & Beagle Security platform’s R&D
DOMECTF
03 Oct 2023
DOME CTF: Boosting ethical hacking & Beagle Security platform’s R&D
Neda Ali
Neda Ali
Product Marketing Specialist
7 limitations of vulnerability scanners
AppSec
10 Sep 2023
7 limitations of vulnerability scanners
Neda Ali
Neda Ali
Product Marketing Specialist
Clickjacking attack
Clickjacking
10 Sep 2023
Clickjacking attack
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Vulnerability management using AI
AI
29 Jun 2023
Vulnerability management using AI
Ragesh K R
Ragesh K R
AI Engineer
Benefits of credentialed scans
AppSec
25 Jun 2023
Benefits of credentialed scans
Neda Ali
Neda Ali
Product Marketing Specialist
Why DAST should be the cornerstone of your application security program?
AppSec
30 May 2023
Why DAST should be the cornerstone of your application security pro...
Neda Ali
Neda Ali
Product Marketing Specialist
What are the common REST API security vulnerabilities?
AppSec
08 Mar 2023
What are the common REST API security vulnerabilities?
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
The 7 Best Veracode Alternatives in the Market Today
AppSec
06 Feb 2023
The 7 Best Veracode Alternatives in the Market Today
Nandagopal S
Nandagopal S
Marketing Associate
DAST vs SAST: What are the differences and how to combine them
web security
26 Jan 2023
DAST vs SAST: What are the differences and how to combine them
Febna V M
Febna V M
Cyber Security Engineer
The Role of Bug Tracking in Ensuring Your Web Application's Security
web security
11 Jan 2023
The Role of Bug Tracking in Ensuring Your Web Application's Security
Rapti Gupta
Rapti Gupta
Head of Marketing, Bugasura
What is continuous penetration testing? Benefits & implementation
web security
04 Jan 2023
What is continuous penetration testing? Benefits & implementation
Nandagopal S
Nandagopal S
Marketing Associate
Personal Data Protection bill explained with seven expert opinions
Compliance
28 Dec 2022
Personal Data Protection bill explained with seven expert opinions
Deepraj R
Deepraj R
Content Specialist
Crucial Components for a Web Application Security Assessment
web security
19 Dec 2022
Crucial Components for a Web Application Security Assessment
Febna V M
Febna V M
Cyber Security Engineer
Access Control Request Headers
HTTP headers
11 Dec 2022
Access Control Request Headers
Nikhil Anilkumar
Nikhil Anilkumar
DevSecOps Engineer
XML Injection
XML Injection
06 Dec 2022
XML Injection
Nikhil Anilkumar
Nikhil Anilkumar
DevSecOps Engineer
Patch released for the critical OpenSSL vulnerability (CVE-2022-3602 & CVE-2022-3786)
openssl
02 Nov 2022
Patch released for the critical OpenSSL vulnerability (CVE-2022-360...
Deepraj R
Deepraj R
Content Specialist
Beagle Security is now a CERT-In Empaneled Information Security Audit Provider
Press
29 Sep 2022
Beagle Security is now a CERT-In Empaneled Information Security Aud...
Rejah Rehim
Rejah Rehim
Co-founder, Director
DomeCTF 2022
DOMECTF2022
26 Sep 2022
DomeCTF 2022
Deepraj R
Deepraj R
Content Specialist
How CISCO got Attacked by Yanluowang Ransomware Gang
Cyber attacks
18 Aug 2022
How CISCO got Attacked by Yanluowang Ransomware Gang
Deepraj R
Deepraj R
Content Specialist
Zero-Day Vulnerabilities in Web Applications
web security
18 Jul 2022
Zero-Day Vulnerabilities in Web Applications
Gincy Mol A G
Gincy Mol A G
AI Engineer
How DevSecOps is a Key Enabler for Digital Transformation
DevSecOps
10 Jul 2022
How DevSecOps is a Key Enabler for Digital Transformation
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
OWASP top ten 2017
owasp
04 Jul 2022
OWASP top ten 2017
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
WordPress Plugin Reflected Cross Site Scripting
XSS
29 Jun 2022
WordPress Plugin Reflected Cross Site Scripting
Febna V M
Febna V M
Cyber Security Engineer
WordPress Authenticated SQL Injection
SQL Injection
29 Jun 2022
WordPress Authenticated SQL Injection
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Beagle Security named a Leader in G2 Summer 2022 Reports
Press
28 Jun 2022
Beagle Security named a Leader in G2 Summer 2022 Reports
Missing Function Level Access Control OWASP 2013
owasp
24 Jun 2022
Missing Function Level Access Control OWASP 2013
Febna V M
Febna V M
Cyber Security Engineer
Cross-site request forgery attack
CSRF
24 Jun 2022
Cross-site request forgery attack
Rejah Rehim
Rejah Rehim
Co-founder, Director
HTTP Strict Transport Security (HSTS) header set to less than six months
HSTS
22 Jun 2022
HTTP Strict Transport Security (HSTS) header set to less than six m...
Febna V M
Febna V M
Cyber Security Engineer
X-XSS-Protection header invalid
X-XSS-Protection
19 Jun 2022
X-XSS-Protection header invalid
Prathap
Prathap
Co-founder, Director
Renegotiation allowing to insert data into HTTPS sessions
SSL
19 Jun 2022
Renegotiation allowing to insert data into HTTPS sessions
Prathap
Prathap
Co-founder, Director
Lucky Thirteen attack against implementations of the Transport Layer Security
SSL
19 Jun 2022
Lucky Thirteen attack against implementations of the Transport Laye...
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
HTTP Strict Transport Security (HSTS) header on the invalid certificate chain
HSTS
19 Jun 2022
HTTP Strict Transport Security (HSTS) header on the invalid certifi...
Prathap
Prathap
Co-founder, Director
Cross-Origin Resource Sharing implemented with universal access
CORS
19 Jun 2022
Cross-Origin Resource Sharing implemented with universal access
Prathap
Prathap
Co-founder, Director
Content Security Policy implemented with unsafe inline
Content Security Policy
19 Jun 2022
Content Security Policy implemented with unsafe inline
Prathap
Prathap
Co-founder, Director
Content Security Policy (CSP) implemented with insecure scheme
Content Security Policy
19 Jun 2022
Content Security Policy (CSP) implemented with insecure scheme
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Content Security Policy (CSP) header cannot be parsed successfully
Content Security Policy
19 Jun 2022
Content Security Policy (CSP) header cannot be parsed successfully
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
8 Login Tips to Stay Safe Online
Data Security
16 Jun 2022
8 Login Tips to Stay Safe Online
Jessica Bullet
Jessica Bullet
Content Writer at Software Tested
Spring4Shell Vulnerability: Analysis and Mitigation
Code Execution
08 Jun 2022
Spring4Shell Vulnerability: Analysis and Mitigation
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Redirection from HTTP to HTTPS to a different host preventing HSTS
Client Side URL Redirect
HSTS
05 Jun 2022
Redirection from HTTP to HTTPS to a different host preventing HSTS
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Redirection from HTTP to HTTPS to a different host preventing HSTS
Client Side URL Redirect
HSTS
05 Jun 2022
Redirection from HTTP to HTTPS to a different host preventing HSTS
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
A Comprehensive Guide to Web Application Security
web security
26 May 2022
A Comprehensive Guide to Web Application Security
Jason Parms
Jason Parms
Customer Service Manager at SSL2BUY
Two-factor authentication: How Beagle Security handles 2FA security testing
AI
08 May 2022
Two-factor authentication: How Beagle Security handles 2FA security...
Nasim Sulaiman
Nasim Sulaiman
AI Engineer
SQL injection(SQLi)
SQL Injection
04 May 2022
SQL injection(SQLi)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
State of Application Security in the IT Sector
Webinar
19 Apr 2022
State of Application Security in the IT Sector
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Website contains Mercurial metadata directory
metadata
19 Apr 2022
Website contains Mercurial metadata directory
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Sub resource Integrity (SRI) not implemented but all external scripts are loaded securely
metadata
19 Apr 2022
Sub resource Integrity (SRI) not implemented but all external scrip...
Febna V M
Febna V M
Cyber Security Engineer
Factoring RSA Export Keys (FREAK) Attack
SSL
19 Apr 2022
Factoring RSA Export Keys (FREAK) Attack
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Cyber Security Threats and Best Practices for Remote Workers
web security
13 Apr 2022
Cyber Security Threats and Best Practices for Remote Workers
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Fingerprinting Web Server
Web server
04 Apr 2022
Fingerprinting Web Server
Prathap
Prathap
Co-founder, Director
Sensitive Data Exposure OWASP 2013
owasp
24 Mar 2022
Sensitive Data Exposure OWASP 2013
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Beagle Security listed among G2’s Best Security Products 2022
Press
10 Feb 2022
Beagle Security listed among G2’s Best Security Products 2022
What is ModSecurity? Installation Guide for Apache on Ubuntu
web security
08 Feb 2022
What is ModSecurity? Installation Guide for Apache on Ubuntu
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Beagle Security named a Leader in G2's Winter 2022 Report
Press
08 Jan 2022
Beagle Security named a Leader in G2's Winter 2022 Report
Why Automate Web Application Security Testing?
web security
07 Jan 2022
Why Automate Web Application Security Testing?
Rejah Rehim
Rejah Rehim
Co-founder, Director
OWASP Top 10 2021
owasp
29 Dec 2021
OWASP Top 10 2021
Deepraj R
Deepraj R
Content Specialist
Cookie Theft: Phishing Campaign Targets YouTube Creators
Cookies
22 Nov 2021
Cookie Theft: Phishing Campaign Targets YouTube Creators
Meera Mathews
Meera Mathews
Software Engineer
DomeCTF 2021
DOMECTF2021
22 Nov 2021
DomeCTF 2021
Deepraj R
Deepraj R
Content Specialist
The Spy Write-up
DOMECTF2021
20 Nov 2021
The Spy Write-up
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
SEO Write-up
DOMECTF2021
20 Nov 2021
SEO Write-up
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Rocket Write-up
DOMECTF2021
20 Nov 2021
Rocket Write-up
Anees P K
Anees P K
DevSecOps Engineer
Murder Write-up
DOMECTF2021
20 Nov 2021
Murder Write-up
Nasim Sulaiman
Nasim Sulaiman
AI Engineer
JOT Write-up
DOMECTF2021
20 Nov 2021
JOT Write-up
Gincy Mol A G
Gincy Mol A G
AI Engineer
International Space Station Write-up
DOMECTF2021
20 Nov 2021
International Space Station Write-up
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Farness Write-up
DOMECTF2021
20 Nov 2021
Farness Write-up
Nasim Sulaiman
Nasim Sulaiman
AI Engineer
LockBox Write-up
DOMECTF2021
20 Nov 2021
LockBox Write-up
Febna V M
Febna V M
Cyber Security Engineer
Apache HTTP Server Path Traversal and Remote Code Execution
Code Execution
18 Oct 2021
Apache HTTP Server Path Traversal and Remote Code Execution
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Microsoft MSHTML Remote Code Execution Vulnerability
Code Execution
13 Oct 2021
Microsoft MSHTML Remote Code Execution Vulnerability
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
POODLE Attack
SSL
14 Jul 2021
POODLE Attack
Febna V M
Febna V M
Cyber Security Engineer
HTTP Request Smuggling
Bypass
09 Jun 2021
HTTP Request Smuggling
Rejah Rehim
Rejah Rehim
Co-founder, Director
Htaccess Bypass
Htaccess
30 Apr 2021
Htaccess Bypass
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Content Security Policy (CSP): Use Cases and Examples
Content Security Policy
20 Apr 2021
Content Security Policy (CSP): Use Cases and Examples
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Remote Code Execution (RCE)
Code Execution
08 Apr 2021
Remote Code Execution (RCE)
Rejah Rehim
Rejah Rehim
Co-founder, Director
Building Application Security in the Azure DevOps Pipeline
web security
10 Feb 2021
Building Application Security in the Azure DevOps Pipeline
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
How to Improve Web Application Security?
web security
29 Jan 2021
How to Improve Web Application Security?
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
How AI is Transforming Cyber Security
AI
20 Jan 2021
How AI is Transforming Cyber Security
Nasim Sulaiman
Nasim Sulaiman
AI Engineer
Here's What You Need to Know About WhatsApp's New Privacy Policy
Data Security
10 Jan 2021
Here's What You Need to Know About WhatsApp's New Privacy Policy
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
Session Security
web security
29 Dec 2020
Session Security
Gincy Mol A G
Gincy Mol A G
AI Engineer
Server Side Request Forgery Attack
Injection
15 Dec 2020
Server Side Request Forgery Attack
Sanjana Sanjeeva Shetty
Sanjana Sanjeeva Shetty
Security Engineer
Man-in-the-Middle (MITM) Attack: Types, Techniques and Prevention
Cyber attacks
03 Dec 2020
Man-in-the-Middle (MITM) Attack: Types, Techniques and Prevention
Febna V M
Febna V M
Cyber Security Engineer
How to Respond to a Cyber Attack?
Cyber attacks
23 Nov 2020
How to Respond to a Cyber Attack?
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
Nginx Server Security: Nginx Hardening Guide
Web server
13 Nov 2020
Nginx Server Security: Nginx Hardening Guide
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
CMS Vulnerabilities: Why are CMS platforms common hacking targets?
CMS Security
05 Nov 2020
CMS Vulnerabilities: Why are CMS platforms common hacking targets?
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Docker Container Security: Attacking Docker Vulnerabilities
Container security
29 Oct 2020
Docker Container Security: Attacking Docker Vulnerabilities
Sanjana Sanjeeva Shetty
Sanjana Sanjeeva Shetty
Security Engineer
10 Common WordPress Errors That Should be Fixed
WordPress
19 Oct 2020
10 Common WordPress Errors That Should be Fixed
Loveneet Singh
Loveneet Singh
Director of Product Marketing,
WP Hacked Help
Machine Learning for Web Automation
AI
09 Oct 2020
Machine Learning for Web Automation
Nasim Sulaiman
Nasim Sulaiman
AI Engineer
c0c0n XIII: DOME CTF 2020
DOMECTF2020
21 Sep 2020
c0c0n XIII: DOME CTF 2020
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
Hike to the Top Writeup
DOMECTF2020
20 Sep 2020
Hike to the Top Writeup
Ananthu S
Ananthu S
Lead Engineer
TPM Writeup
DOMECTF2020
20 Sep 2020
TPM Writeup
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Time Zone Writeup
DOMECTF2020
20 Sep 2020
Time Zone Writeup
Anees P K
Anees P K
DevSecOps Engineer
Tiktok Writeup
DOMECTF2020
20 Sep 2020
Tiktok Writeup
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
The Retrospect Writeup
DOMECTF2020
20 Sep 2020
The Retrospect Writeup
Nasim Sulaiman
Nasim Sulaiman
AI Engineer
The Leaked List Writeup
DOMECTF2020
20 Sep 2020
The Leaked List Writeup
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Stones Writeup
DOMECTF2020
20 Sep 2020
Stones Writeup
Febna V M
Febna V M
Cyber Security Engineer
Qropolis Writeup
DOMECTF2020
20 Sep 2020
Qropolis Writeup
Anandhu K A
Anandhu K A
Lead Engineer
PetVet Writeup
DOMECTF2020
20 Sep 2020
PetVet Writeup
Anees P K
Anees P K
DevSecOps Engineer
Neos Writeup
DOMECTF2020
20 Sep 2020
Neos Writeup
Anandhu Krishnan
Anandhu Krishnan
Lead Engineer
Mercure’s Signature Dish Writeup
DOMECTF2020
20 Sep 2020
Mercure’s Signature Dish Writeup
Jishnu Vijayan
Jishnu Vijayan
Security Engineer
JimmyBot Writeup
DOMECTF2020
20 Sep 2020
JimmyBot Writeup
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Inside Out Writeup
DOMECTF2020
20 Sep 2020
Inside Out Writeup
Anandhu K A
Anandhu K A
Lead Engineer
Foundation Palette Writeup
DOMECTF2020
20 Sep 2020
Foundation Palette Writeup
Gincy Mol A G
Gincy Mol A G
AI Engineer
City Writeup
DOMECTF2020
20 Sep 2020
City Writeup
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Black Propagation Writeup
DOMECTF2020
20 Sep 2020
Black Propagation Writeup
Nasim Sulaiman
Nasim Sulaiman
AI Engineer
Assemble Writeup
DOMECTF2020
20 Sep 2020
Assemble Writeup
Gincy Mol A G
Gincy Mol A G
AI Engineer
Adleman's Doc Writeup
DOMECTF2020
20 Sep 2020
Adleman's Doc Writeup
Febna V M
Febna V M
Cyber Security Engineer
The Dark Times Writeup
DOMECTF2020
20 Sep 2020
The Dark Times Writeup
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Frames & Stories Writeup
DOMECTF2020
20 Sep 2020
Frames & Stories Writeup
Gincy Mol A G
Gincy Mol A G
AI Engineer
5 Biggest Data Breaches of 2020
Data Security
16 Sep 2020
5 Biggest Data Breaches of 2020
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
How to Store and Secure Sensitive Data in Web Applications
web security
07 Sep 2020
How to Store and Secure Sensitive Data in Web Applications
Gincy Mol A G
Gincy Mol A G
AI Engineer
Secure Firewall Configuration for Web Applications
web security
25 Aug 2020
Secure Firewall Configuration for Web Applications
Febna V M
Febna V M
Cyber Security Engineer
WordPress Security: Vulnerabilities and How to Improve Security
WordPress
21 Jul 2020
WordPress Security: Vulnerabilities and How to Improve Security
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
SIGRed: Microsoft DNS Server RCE Vulnerability
Information Leakage
15 Jul 2020
SIGRed: Microsoft DNS Server RCE Vulnerability
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
DNS Zone Transfer Vulnerability
Information Leakage
14 Jul 2020
DNS Zone Transfer Vulnerability
Febna V M
Febna V M
Cyber Security Engineer
Importance of TLS 1.3: SSL and TLS Vulnerabilities
Web server
06 Jul 2020
Importance of TLS 1.3: SSL and TLS Vulnerabilities
Gincy Mol A G
Gincy Mol A G
AI Engineer
Hardening Server Security By Implementing Security Headers
Web server
27 Jun 2020
Hardening Server Security By Implementing Security Headers
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Apache Web Server Hardening
Web server
15 Jun 2020
Apache Web Server Hardening
Anees P K
Anees P K
DevSecOps Engineer
Artificial Intelligence in Cyber Security
AI
web security
26 May 2020
Artificial Intelligence in Cyber Security
Febna V M
Febna V M
Cyber Security Engineer
Artificial Intelligence in Cyber Security
AI
web security
26 May 2020
Artificial Intelligence in Cyber Security
Febna V M
Febna V M
Cyber Security Engineer
Covid-19 Cyber Attacks: How Attackers are Exploiting the Crisis
Cyber attacks
23 Apr 2020
Covid-19 Cyber Attacks: How Attackers are Exploiting the Crisis
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
Why Small Businesses Should Invest in Cybersecurity?
web security
SMB
05 Jan 2020
Why Small Businesses Should Invest in Cybersecurity?
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
Why Small Businesses Should Invest in Cybersecurity?
web security
SMB
05 Jan 2020
Why Small Businesses Should Invest in Cybersecurity?
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
5 Ways to Improve Your Web Application Security in 2020
web security
SMB
01 Jan 2020
5 Ways to Improve Your Web Application Security in 2020
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
5 Ways to Improve Your Web Application Security in 2020
web security
SMB
01 Jan 2020
5 Ways to Improve Your Web Application Security in 2020
Abey Koshy Itty
Abey Koshy Itty
Marketing Manager
Alexa, Google Home and Siri Can Be Hacked Using Laser Light
Client Side URL Redirect
HSTS
06 Nov 2019
Alexa, Google Home and Siri Can Be Hacked Using Laser Light
Anees P K
Anees P K
DevSecOps Engineer
Alexa, Google Home and Siri Can Be Hacked Using Laser Light
Client Side URL Redirect
HSTS
06 Nov 2019
Alexa, Google Home and Siri Can Be Hacked Using Laser Light
Anees P K
Anees P K
DevSecOps Engineer
High Severity Flaws Discovered in Nvidia Shield TV and Intel NUCs
blog
14 Oct 2019
High Severity Flaws Discovered in Nvidia Shield TV and Intel NUCs
Anandhu Krishnan
Anandhu Krishnan
Lead Engineer
Critical RCE Vulnerability Found in iTerm2 MacOS Terminal Emulator App
blog
12 Oct 2019
Critical RCE Vulnerability Found in iTerm2 MacOS Terminal Emulator App
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
WordPress Versions
WordPress
04 Jul 2018
WordPress Versions
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
WordPress Themes
WordPress
04 Jul 2018
WordPress Themes
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
WordPress Plugin Vulnerabilities
WordPress
04 Jul 2018
WordPress Plugin Vulnerabilities
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Union Query SQL Injection (SQLi)
SQL Injection
04 Jul 2018
Union Query SQL Injection (SQLi)
Febna V M
Febna V M
Cyber Security Engineer
Transport Layer Security
TLS
04 Jul 2018
Transport Layer Security
Prathap
Prathap
Co-founder, Director
The unseen Drupal
WordPress
04 Jul 2018
The unseen Drupal
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
TLS(Transport Layer Security) protocol version outdated
TLS
04 Jul 2018
TLS(Transport Layer Security) protocol version outdated
Rejah Rehim
Rejah Rehim
Co-founder, Director
Stacked Queries SQL Injection (SQLi)
SQL Injection
04 Jul 2018
Stacked Queries SQL Injection (SQLi)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
SSL(Secure Sockets Layer) protocol version outdated
SSL
04 Jul 2018
SSL(Secure Sockets Layer) protocol version outdated
Febna V M
Febna V M
Cyber Security Engineer
Inline Queries SQL Injection (SQLi)
SQL Injection
04 Jul 2018
Inline Queries SQL Injection (SQLi)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Error based SQL Injection (SQLi)
SQL Injection
04 Jul 2018
Error based SQL Injection (SQLi)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Cookie session without 'Secure' flag
Cookies Attributes
04 Jul 2018
Cookie session without 'Secure' flag
Prathap
Prathap
Co-founder, Director
Boolean based Blind SQL Injection (SQLi)
SQL Injection
04 Jul 2018
Boolean based Blind SQL Injection (SQLi)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
OWASP top ten 2013
owasp
04 Jul 2018
OWASP top ten 2013
Application Threat Modeling
blog
04 Jul 2018
Application Threat Modeling
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
WordPress SQL Injection
SQL Injection
29 Jun 2018
WordPress SQL Injection
Febna V M
Febna V M
Cyber Security Engineer
WordPress Blind SQL Injection
Blind SQL Injection
29 Jun 2018
WordPress Blind SQL Injection
Febna V M
Febna V M
Cyber Security Engineer
Document Object Model Based Cross Site Scripting
DOM XSS
29 Jun 2018
Document Object Model Based Cross Site Scripting
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
WordPress Directory traversal
Directory traversal
26 Jun 2018
WordPress Directory traversal
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
WordPress Cross-Site Scripting
XSS
26 Jun 2018
WordPress Cross-Site Scripting
Prathap
Prathap
Co-founder, Director
Using Components with Known Vulnerabilities
owasp
24 Jun 2018
Using Components with Known Vulnerabilities
Rejah Rehim
Rejah Rehim
Co-founder, Director
Unvalidated Redirects and Forwards
owasp
24 Jun 2018
Unvalidated Redirects and Forwards
Rejah Rehim
Rejah Rehim
Co-founder, Director
Sensitive Data Exposure
owasp
24 Jun 2018
Sensitive Data Exposure
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
MX injection
Injection
24 Jun 2018
MX injection
Febna V M
Febna V M
Cyber Security Engineer
Lightweight Directory Access Protocol (LDAP) injection
Injection
24 Jun 2018
Lightweight Directory Access Protocol (LDAP) injection
Febna V M
Febna V M
Cyber Security Engineer
Lack of wildcard DNS entry found
Clickjacking
24 Jun 2018
Lack of wildcard DNS entry found
Febna V M
Febna V M
Cyber Security Engineer
Insufficient Logging And Monitoring
owasp
24 Jun 2018
Insufficient Logging And Monitoring
Febna V M
Febna V M
Cyber Security Engineer
Insecure Direct Object References
owasp
24 Jun 2018
Insecure Direct Object References
Febna V M
Febna V M
Cyber Security Engineer
Insecure Deserialization
owasp
24 Jun 2018
Insecure Deserialization
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Cross Site Scripting
XSS
24 Jun 2018
Cross Site Scripting
Prathap
Prathap
Co-founder, Director
Broken Authentication
owasp
24 Jun 2018
Broken Authentication
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
X-XSS-Protection Not Implemented
X-XSS-Protection
19 Jun 2018
X-XSS-Protection Not Implemented
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Website contains SVN metadata directory
metadata
19 Jun 2018
Website contains SVN metadata directory
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Website contains Git metadata directory
metadata
19 Jun 2018
Website contains Git metadata directory
Febna V M
Febna V M
Cyber Security Engineer
Web based mail package
Injection
CRLF
19 Jun 2018
Web based mail package
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Web based mail package
Injection
CRLF
19 Jun 2018
Web based mail package
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Tickets option leak uninitialised memory
SSL
19 Jun 2018
Tickets option leak uninitialised memory
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
The RC4 algorithm In Transport Layer Security and Secure Sockets Layer
SSL
19 Jun 2018
The RC4 algorithm In Transport Layer Security and Secure Sockets Layer
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Subresource Integrity (SRI) implemented, but external scripts are loaded over http
SRI
19 Jun 2018
Subresource Integrity (SRI) implemented, but external scripts are l...
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Subresource Integrity (SRI) is not implemented, and external scripts are not loaded securely
SRI
19 Jun 2018
Subresource Integrity (SRI) is not implemented, and external script...
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Site did not return a status code of 200
status code
19 Jun 2018
Site did not return a status code of 200
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Session Cookie set without 'Secure' Flag but protected by HSTS
HSTS
Cookies Attributes
19 Jun 2018
Session Cookie set without 'Secure' Flag but protected by HSTS
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Session Cookie set without 'Secure' Flag but protected by HSTS
HSTS
Cookies Attributes
19 Jun 2018
Session Cookie set without 'Secure' Flag but protected by HSTS
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
SWEET32 attack
SSL
19 Jun 2018
SWEET32 attack
Rejah Rehim
Rejah Rehim
Co-founder, Director
Processing of Change Cipher Spec
SSL
19 Jun 2018
Processing of Change Cipher Spec
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Obtain plaintext by observing length differences
SSL
19 Jun 2018
Obtain plaintext by observing length differences
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Logjam common primes
SSL
19 Jun 2018
Logjam common primes
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Information leakage in EXIF data of images
Information Leakage
19 Jun 2018
Information leakage in EXIF data of images
Rejah Rehim
Rejah Rehim
Co-founder, Director
Heartbleed vulnerability
SSL
19 Jun 2018
Heartbleed vulnerability
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
HTTP Strict Transport Security (HSTS) header not implemented
HSTS
19 Jun 2018
HTTP Strict Transport Security (HSTS) header not implemented
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
HTTP Strict Transport Security header not available over HTTPS
HSTS
19 Jun 2018
HTTP Strict Transport Security header not available over HTTPS
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
HTTP Strict Transport Security (HSTS) header cannot be recognised
HSTS
19 Jun 2018
HTTP Strict Transport Security (HSTS) header cannot be recognised
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Cross-Origin Resource Sharing XML cannot be parsed
CORS
19 Jun 2018
Cross-Origin Resource Sharing XML cannot be parsed
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Cookies SameSite flag invalid
Cookies Attributes
19 Jun 2018
Cookies SameSite flag invalid
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Cookie without 'Secure' flag but protect by HSTS
HSTS
19 Jun 2018
Cookie without 'Secure' flag but protect by HSTS
Febna V M
Febna V M
Cyber Security Engineer
Cookie set without 'Secure' flag
Cookies Attributes
19 Jun 2018
Cookie set without 'Secure' flag
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Cookie anti-CSRF flag without SameSite flag
CSRF
Cookies Attributes
19 Jun 2018
Cookie anti-CSRF flag without SameSite flag
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Cookie anti-CSRF flag without SameSite flag
CSRF
Cookies Attributes
19 Jun 2018
Cookie anti-CSRF flag without SameSite flag
Sooraj V Nair
Sooraj V Nair
Cyber Security Engineer
Content Security Policy (CSP) header not implemented
Content Security Policy
19 Jun 2018
Content Security Policy (CSP) header not implemented
Febna V M
Febna V M
Cyber Security Engineer
CRLF Injection
Injection
CRLF
19 Jun 2018
CRLF Injection
Rejah Rehim
Rejah Rehim
Co-founder, Director
CRLF Injection
Injection
CRLF
19 Jun 2018
CRLF Injection
Rejah Rehim
Rejah Rehim
Co-founder, Director
Time based Blind SQL Injection (SQLi)
SQL Injection
Time Based Blind SQL Injection
05 Jun 2018
Time based Blind SQL Injection (SQLi)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Time based Blind SQL Injection (SQLi)
SQL Injection
Time Based Blind SQL Injection
05 Jun 2018
Time based Blind SQL Injection (SQLi)
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
IBM DB Boolean based blind sql injection
IBM
SQL Injection
Injection
05 Jun 2018
IBM DB Boolean based blind sql injection
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
IBM DB Boolean based blind sql injection
IBM
SQL Injection
Injection
05 Jun 2018
IBM DB Boolean based blind sql injection
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
IBM DB Boolean based blind sql injection
IBM
SQL Injection
Injection
05 Jun 2018
IBM DB Boolean based blind sql injection
Nash N Sulthan
Nash N Sulthan
Cyber Security Lead Engineer
Cookie session without 'HttpOnly' flag
Cookies Attributes
05 Jun 2018
Cookie session without 'HttpOnly' flag
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Redirects to HTTPS eventually, but initial redirection is to another HTTP URL
Client Side URL Redirect
05 Jun 2018
Redirects to HTTPS eventually, but initial redirection is to anothe...
Prathap
Prathap
Co-founder, Director
Redirects, but final destination is not an HTTPS URL.
Client Side URL Redirect
05 Jun 2018
Redirects, but final destination is not an HTTPS URL.
Rejah Rehim
Rejah Rehim
Co-founder, Director
Does not redirect to a HTTPS site from HTTP port
Client Side URL Redirect
05 Jun 2018
Does not redirect to a HTTPS site from HTTP port
Manieendar Mohan
Manieendar Mohan
Cyber Security Lead Engineer
Experience the power of automated penetration testing & contextual reporting.
Product tour