Sep 2Proxying Burp Traffic through VPS using SOCKS ProxyProblem Statement: During a recent project, I had a unique challenge: I had to maintain a static IP address, as it had been designated for whitelist access. However, my IP address was constantly changing, presenting a significant challenge in meeting project deadlines. I came up with a solution to send all the…Hacking3 min readHacking3 min read
Apr 10Intercept Traffic of Proxy Unaware Applications in BurpSuiteProblem Statement Oftentimes we come across such mobile applications where we can not be able to intercept the traffic. We won’t be able to see any TLS errors for the domain in scope in the Event Log from Burp Dashboard (which essentially suggest SSL Pinning errors), at the same time applications are…Mobile6 min readMobile6 min read
Published inInfoSec Write-ups·Jul 14, 2022Android WebView Hacking — Enable WebView DebuggingTL;DR If you ever come across applications which are using javascript and WebView, these tricks will help you debug the applications easily. There are two methods to enable WebView debugging: Smali modification Using Frida tool Introduction There are so many apps out there which are simply wrappers around web pages, or web…Android5 min readAndroid5 min read
Published inInfoSec Write-ups·Dec 27, 2021Log4Shell Simplified - All you need to know about Log4j CVE-2021-44228Hello everyone, Since December 9th, the vulnerability has been reported to be massively exploited in the wild. This article is just collection of all required details available on internet to understand Log4Shell vulnerability (CVE-2021-44228). What is Log4j? Apache Log4j is a popular open source logging Java-based logging utility originally written by Ceki Gülcü…Log4shell5 min readLog4shell5 min read
Published inInfoSec Write-ups·May 27, 2021OAuth 2.0 Hacking Simplified — Part 2 — Vulnerabilities and MitigationHello everyone, I am back with another part of the OAuth 2.0 Hacking Simplified series. We have already gone through basics in the previous post. I highly recommend you to go through the Part 1. In this blog we will dive into how we can exploit and mitigate common OAuth…8 min read8 min read
Published inInfoSec Write-ups·May 8, 2021OAuth 2.0 Hacking Simplified — Part 1 — Understanding BasicsWhat is OAuth 2.0? OAuth is an open-standard authorization protocol or framework that describes how unrelated servers and services can safely allow authenticated access to their assets without actually sharing the initial, related, single logon credential. Auth0 generates access tokens for API authorization scenarios, in JSON web token (JWT) format. The permissions represented by…7 min read7 min read
Published inInfoSec Write-ups·Apr 24, 2021Hacking GraphQL for Fun and Profit — Part 2— Methodology and ExamplesHello everyone, I am back with another part of the Hacking GraphQL series. We have already gone through basics in the previous post. I highly recommend you to go through the post, if not already. In this blog we will go through a demo application called Generic University created by…GraphQL9 min readGraphQL9 min read
Published inInfoSec Write-ups·Apr 21, 2021Hacking GraphQL for Fun and Profit — Part 1 — Understanding GraphQL BasicsHello everyone!! In this part one of GraphQL Hacking series, I will be going through some basics of GraphQL to understand technology better and in the next part we will be actually hacking a demo application. There are tons of good resources available especially official documentation is top notch. This…GraphQL5 min readGraphQL5 min read
Apr 17, 2021Docker Quick start — A practical approach to learn docker basic commandsIntroduction Hello everyone! As a pen-tester by profession, I usually have to deal with different environments. Sometimes compiling tools which has some nasty dependencies and failing to build or want to generate a PoC for specific environment or creating CTFs. Docker always comes handy in such situations. So here is beginners…Docker5 min readDocker5 min read
Apr 16, 2021#BugBounty — How I Found a Webshell on a VDP ProgramTL;DR Recon → Interesting URL → java code → download to windows machine → Defender identified as jsp webshell Hi Everyone, This is an interesting finding I have found on a public vdp program. While me and a friend of mine Jaimin was doing recon on a public program, he…Bug Bounty2 min readBug Bounty2 min read
