What are Supply Chains Attacks An attack on the supply chain, also known as an attack on the value chain or a third-party attack, takes place when a hacker gains access to your system by way of an external partner or provider who is authorised to access your systems and data. These providers represent various…

Introduction These days, developers are increasingly gravitating toward frameworks that are written in JavaScript. As we progress through the process of performing penetration testing for our clients, we encounter a great number of JS-based applications. As a result of the fact that next.js, vue.js, …

Introduction Deserialization attacks are quite popular when it comes to programming languages such as Java, Python, and Ruby. These flaws manifest themselves when a stream of data is directly deserialized without any checks being performed first, and they might result in the execution of remote code. In this blog post…

Introduction Almost all the web applications these days make use of JavaScript, be it on the front-end or backend especially after the developments in NodeJS, and frameworks like Express, VueJS, etc. Looking at the security aspect, we should be careful when importing malicious libraries, dependencies or harmful functions that might lead…

Introduction This is the fourth blog post in the Linux Hardening Series where we learn and discuss how to secure our Linux servers that have been deployed to host our applications or websites on the internet. The previous blog posts can be found here, here and here. In this blog post…

Introduction In an enterprise environment, there could be different services that you might require to get your work done. Often those services require authentication. Having to create an account for each service (for each employee) not only puts a burden on the IT staff but also promotes password reuse. …

Introduction There are several opportunities to test network penetration. …

Introduction