Blog English – Page 5

OWASP TOP 10: INJECTION VULNERABILITY

Information security Injection vulnerabilities are usually vulnerabilities caused by command execution or user data inclusion that are not controlled or prevented. According to statistics, 28% of organizations are affected by this vulnerability. This vulnerability is divided into the following attack vectors: Injection through SQL, LDAP, XPath queries. Injection with commands in operating systems Injection via […]

OWASP TOP 10: INJECTION VULNERABILITY Read More »

Overview Of The Red Team Concept-3

Blog English /

Another example for Red Teaming is physical penetration. It’s easy to fake an employee’s card, but how will security react when a stranger with a different ID enters the building? Therefore, there are many potential risks when implementing the “real” attackers scheme. And due to the complexity of the systems and the complexity of both

Overview Of The Red Team Concept-3 Read More »

Missing Function Level Access Control

Blog English /

Missing Function Level Access Control The essence of this vulnerability, as the name suggests, is that proper access to the requested object is not verified. An attacker, who may be the current user of the application, can use it to escalate privileges and gain access to restricted functionality. For example, restricted features at the administrator

Missing Function Level Access Control Read More »