This is a story of hacking containers not due to the lack of security best practices, or vulnerable dependencies of Node.js applications, but that of third-party open-source components which may exist in a Docker-based Node.js application. 1. I have created …
In this tutorial, we explore the powerful autodetect mode in Hashcat for cracking various types of hashes. Learn how to effectively leverage Hashcat’s autodetect feature to crack passwords and gain access to systems through broken authentication. Enhance your penetration testing …
In this video tutorial, we delve into the world of advanced web security techniques and explore the concept of Blind Server-Side Request Forgery (SSRF) attacks combined with XML External Entity (XXE) Injection. By harnessing the power of Python, we demonstrate …
In this comprehensive tutorial, we will guide you through the process of enabling HTTPS on an Nginx server in Kali Linux. Securing your website with HTTPS is essential for protecting sensitive data and ensuring a secure connection between your server …
Session Hijacking Modern web applications utilize cookies to maintain a user’s session throughout different browsing sessions. This enables the user to only log in once and keep their logged-in session alive even if they visit the same website at another …
Note – ***This video is made for educational purposes only***. I’m performing all the attacks in a virtual lab controlled by me. Any illegal usage of such educational content will be your own responsibility. Let’s start! In this video, we …