How to Discover SQL Injections
A comprehensive writeup emphasizing the importance of context
RedMethod
I am a Web Application Security Consultant and Pen Tester. I'm currently part of the AppSec team at Maglan - Accenture Security. All Views are my Own.
Latest articles
Testing File Upload Mechanism
Straightforward Approach to Hacking File Uploads
XXE - Underrated?
How to Gain Access To All The Data - Tips Tricks and Resources
CSRF Revisited
What you've been taught VS What you will see.
SSRF Demystified
From Detection To High Impact Exploitation
IDOR - Broken Authentication
Methods and Strategies to Break Authorization
Quick XSS Tutorial
How to Find XSS with Burp (and then some)
Local File Inclusion and Path Traversal Attacks
Find Exploit Impact
Everything You Need To Know About Open-Redirects
Background, Detection, Exploitation, Impact
