Application Security
PHP Security Code Review Cheat Sheet
In today’s development landscape among our customers, it’s rare to encounter production PHP code. However, when we do, the story is always the same. Typically, such code is…
Read itCloud Security
Still Using SSRF to Take Over Cloud Deployments Once Again
How Server-Side Request Forgery Can Lead to Full Cloud Compromise - and What You Can Do About It Contents Introduction Server-Side Request Forgery (SSRF) is a powerful exploit…
Read itCloud Security
Firestore White Box Security Review Checklist
Table of Contents Introduction Securing your application’s Firestore database is crucial for protecting sensitive data and maintaining user trust. Google Firestore, a scalable NoSQL cloud database, offers robust…
Read itBlack Box Testing
Firestore Database – Black Box Security Testing Guide – Go Beyond *.firebaseio.com/.json
Table of Contents Incentives Firestore security is an important topic for modern applications. Its wide usage and serverless architecture may cause security issues in the areas such as…
Read itBlack Box Testing
A Guide For Advanced Message Protected API Hacking Using Hackvertor and Burp (Part #2)
Table of Contents More up-to-date Hackvertor game-changer techniques, code examples, and tips for advanced penetration testing and bug bounty. Intro Hackvertor is a Burp extension that programmatically extends…
Read itBlack Box Testing
Advanced Testing Of Web Application With Custom Message Signing Using Hackvertor (Part #1)
Table of Contents Introduction Many of us have probably been faced with testing an application with custom HTTP request authentication or message signing. The requests from these applications…
Read itTell us what the system does and what worries you.
If a penetration test is not what you need yet, we will say so.