Note: I will not mention the companies, for reasons of privacy and confidentiality. What is SQL Injection? A SQL Injection attack consists of insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database…

Hi, I’m Asem Eleraky -aka Melotover- and today I will show you how I could bypass a tough WAF to execute XSS and make a full account takeover via stealing the victim’s cookies. Note: I decided to make this scenario a challenge so you can try to solve it before…

First of all, this is my first write up about finding or bug when I work as cyber security. and also I try to write this post with English, so I’m apology if my write-up so bad, or hard to understand for people who their native language are English. Okay…

Hello friend! I had learnt a lot of knowledges from others’ s blogs, write-ups, so I think I should give back to the community. :) I hope this blog will be useful for someone. This post is about some methodologies I had used to find IDOR vulnerability and some my…

Microsoft MSHTML Remote Code Execution Vulnerability — Technical Explanation (According to Microsoft) The exploit document uses an external oleObject relationship to embed exploitative JavaScript within MIME HTML remotely hosted content that results in (1) the download of a CAB file containing a DLL bearing an INF file extension, (2) decompression of that CAB file, and (3) execution of a function within that…