Skip to content
  • About
  • Our Services
  • Our Methodology
    • Attacks & Tests
    • Testing modes
  • Blog

Contact us

Have a question or comment? Submit your message through our contact form and a member of our team will get back to you within 24 hours.

Edit Content

    Nathan Touati

    • Home
    • Nathan Touati
    Black Box Testing, Hacking

    ReDoS

    December 29, 2024 Nathan Touati No comments yet

    How a Simple Test Brought Down a Server You sanitized your input fields for XSS? You might have opened a new door for attackers… Imagine this: You’re a developer at your company. After a penetration test, several issues were found in your app, some input fields have no limits on length or content. This leaves […]

    Black Box Testing, Brute Force, Hacking

    Sandwich Attacks: From Reset Password to Account Takeover

    December 18, 2024 Nathan Touati No comments yet

    Once Upon a Password Reset… You’ve just forgotten your password for a website. No big deal, you click “Forgot Password,” they send you a link, and you reset it. At the time the feature was designed, it was decided that this reset link would include a UUID token. The reasoning seemed sound—since UUIDs are unique, […]

    Search

    Categories

    • Black Box Testing (5)
    • Brute Force (6)
    • Code Review (1)
    • Hacking (11)
    • White Box Testing (4)

    Recent posts

    • Is Your AI Secure? The Dark Reality of LLM Vulnerabilities
    • Securing the Lifeline: A Guide to Medical Device Penetration Testing
    • What Is Real-Time Penetration Testing And Why It Matters

    AppSec Labs offer rapid, modern security penetration testing, utilizing smart solutions to protect against evolving cyber threats.

    Features
    • Home
    Resources
    • Blog
    Company
    • About us
    Get in touch
    • Guy Nachum (CRO):
    • guy@appsec-labs.com
    • +972 52-433-9393
    • Sales:
    • sales@appsec-labs.com
    • General Requests:
    • info@appsec-labs.com

    © AppSec Labs 2024. All Rights Reserved.

    • Terms & Conditions
    • Privacy Policy