This article is a part of the Guide for Burp Suite series. Within the previous article, we see learn about the Different tools that are available with Burp Suite. Now we’ll move forward and learn about the basics of proxy and how we can configure the FoxyProxy tool with the…

This article is a part of the Guide for Burp Suite series. Within the previous article, we see the Introduction of Burp Suite. Now we’ll move forward and learn about the different tools that are available with Burp Suite. So Let’s Get Started. Read Complete Article on: https://securitycipher.com/2020/06/07/different-burp-suite-tools-guide-for-burp-suite/ Different Burp Suite Tools - Guide for Burp Suite This article is a part of the Guide for Burp Suite series. Within the previous article, we see Introduction of Burp…securitycipher.com

Introduction As a Security engineer, ensuring the security of your application is of the utmost importance. With the advent of Dastardly, a free, lightweight web application security scanner, integrating security checks into your CI/CD pipeline has never been easier. Dastardly is specifically designed for Security engineers and checks for seven security…

In this article, we will discuss what is Burp Suite and the comparison of different versions of the burp suite. This is the first article of our Guide for Burp Suite Series. So let’s get started with the Introduction of the Burp Suite. Read Full Article on: https://securitycipher.com/2020/06/07/introduction-to-burp-suite-guide-for-burp-suite/ Introduction Burp or…

🥺 Vulnerable Code Here is a vulnerable Java code snippet that is susceptible to Session Fixation attack: HttpSession session = request.getSession(); String sessionId = request.getParameter("sessionId"); if (sessionId != null) { session.setId(sessionId); } This code is vulnerable to session fixation attacks because it allows an attacker to specify the session ID that should be used for the user’s session. An attacker could potentially fixate a user’s session by sending them a link with a malicious session ID, and then use that session ID to impersonate the user and gain access to their session.

Web applications are a crucial part of today’s online landscape, with businesses relying on them to provide services to their customers. However, as the use of web applications increases, so does the risk of cyber attacks. Threat modeling is a technique that can help organizations identify potential security threats and…

Read More: https://securitycipher.com/linux-commands/ Linux Commands - For Penetration Testers Discover most useful basic and advanced Linux commands for penetration testers and security professionals that they use…securitycipher.com pwd — Prints the current working directory — pwd ls — Lists the files and directories in the current directory — ls cd — Changes the current directory-cd /home/user/”

Below is a compilation of subdomain enumeration tools that can be used to discover subdomains associated with a specific domain. The identification of these subdomains can significantly expand the scope of your testing activities and enhance your testing effectiveness. Read Full Article Subdomain Enumeration Tools Below is a compilation of subdomain enumeration tools that can be used to discover subdomains associated with a…securitycipher.com

🥺 Vulnerable Code Here is an example of Java code that is vulnerable to SQL Injection attack on productId parameter: String productId = request.getParameter("id"); String query = "SELECT * FROM products WHERE id = " + productId; Statement st = connection.createStatement(); ResultSet rs = st.executeQuery(query); while (rs.next()) { String name = rs.getString("name"); String description = rs.getString("description"); // display product details }