PinnedJayateertha GuruprasadinInfoSec Write-upsTorrent Trails: Unmasking Your Torrent Downloads with IP AddressPublic IP address is mostly assigned static to each unique person by an ISP in most of the cases.Oct 26, 20235Oct 26, 20235
PinnedJayateertha GuruprasadinInfoSec Write-upsXS-Leak: Deanonymize Microsoft Skype Users by any 3rd-party websiteXS-Leaks — These are class of vulnerabilities derived from side channel attack. Although browsers have security features like SOP, which…Apr 21, 2023Apr 21, 2023
PinnedJayateertha GuruprasadinInfoSec Write-upsHow Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)Few days ago, while I was exploring browser based bugs, I read a article over internet explaining about a path traversal vulnerability in…Jan 14, 20232Jan 14, 20232
PinnedJayateertha GuruprasadinInfoSec Write-upsBlind SSRF in Skype (Microsoft)Server Side Request Forgery is a vulnerability that allows attacker to make server request to attacker controlled network location/path.Oct 28, 20221Oct 28, 20221
PinnedJayateertha GuruprasadinInfoSec Write-upsGrafana Admin Panel bypass in Google Acquisition(VirusTotal)I started with usual subdomain recon of a google acquisition(VirusTotal).This time I used a online subdomain finder service…Feb 20, 20212Feb 20, 20212
Jayateertha GuruprasadinInfoSec Write-upsIntro to Debugging Java Web Servers Without Source Code For Security ResearchersDebugging Java web servers in an on-premise environment is crucial for pentesting and source code reviews. It’s possible to easily…Jul 16Jul 16
Jayateertha GuruprasadinInfoSec Write-upsOpManager: CSRF & XS-Leak Chained for Information DisclosureManageEngine OpManager is a powerful network monitoring software that provides deep visibility into the performance of your routers…Apr 18Apr 18
Jayateertha GuruprasadinInfoSec Write-upsJSON CSRF in Microsoft Bing Maps CollectionsBing Maps allows users to create a collection and add places to those collections as shown below.Feb 9Feb 9
Jayateertha GuruprasadinInfoSec Write-upsIntro to Fuzzing IoT Protocols using BooFuzzIn this article let’s learn about how to fuzz IoT protocols such as modbus using boofuzz, a open source fuzzing framework which can fuzz…Jan 17Jan 17
Jayateertha GuruprasadBypass Duplicate Tweet Protection using negative tweet idTwitter doesn’t allow making tweets of same content in relatively near time frame.Nov 11, 2022Nov 11, 2022
