This article is dedicated to log4j and how it’s being exploited in the wild by attackers. Log4j Apache Log4j, a project of Apache Software Foundation, is a Java-based logging utility. It is written in java and is a package located in the Java logging systems. It is a part of several…

Introduction There was a problem with a server while you were trying to figure out how to fix it. It could be because you used the wrong command, or there could be other reasons. So to figure out what went wrong, you usually run the history command, which will show you…

Introduction Imagine that your friend Bob creates a website, and you and Alice create an account on the website out of love and care for your friend. The website implements role-based features, meaning that Bob is the admin and can add, delete, modify products, and delete users who act maliciously. On…

Introduction There are two applications on a mobile or web—static and dynamic. The static site is just a bunch of web pages compiled together, showing you the same information every time. It doesn't display information as per the user type/role and has no interaction with a back-end database. On the other…

OWASP Risk Rating Methodology In general terms, OWASP Risk Rating Methodology takes us through a series of steps that can use to calculate the risk caused by a vulnerability/threat. Technical Terms: 1. Risk: It can be defined as the potential/probability for loss, damage or destruction of assets or data. 2. Vulnerability: Weaknesses…

We are going to talk about “Excessive Data Exposure” in this post that we are making for API Security. But before you can move on, you need to get a grasp on what APIs are and how they operate; for that, you’ll need to read through the blog posts I…

Introduction Webapplications have reaped the benefits of evolution, and not just the web but also apps are now being built in a variety of contexts, such as the android or iOS application. However, these applications have been developed independently up until this point. Now, corporations have developed a centralised application programming…

Introduction Every day, new reports of data breaches emerge. Because of inadequate implementation, businesses are falling victim to hacking, which in turn exposes sensitive consumer information. There are many illustrations, all of which may be found with little effort on your part. Therefore, in the modern world, every organization wants to…