Oct 18, 2022WordPress Subdomain Takeover on Bugcrowd Private ProgramHello guys👋👋, Prajit here from the BUG XS Team, recently I got a valid WordPress Subdomain Takeover on a Bugcrowd private program, in this write-up I will discuss how I found it. Hope you enjoy it 😉! So before jumping directly into steps, let me give you a short gist…Cybersecurity4 min readCybersecurity4 min read
Apr 12, 2022Basics of APIHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my 24th task I was given to research about different types of APIs. What is an API? Application Programming Interface (API) is a software interface…Cybersecurity4 min readCybersecurity4 min read
Apr 4, 2022Subdomain Enumeration Tool -DomeHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my 22th task I was given to research about Dome an subdomain enumeration tool. Description: Dome is a subdomain enumeration tool written…Cybersecurity2 min readCybersecurity2 min read
Feb 16, 2022File Inclusion VulnerabilitiesHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my nineteenth task I was given to research about File Inclusion Vulnerability. What is File Inclusion Vulnerability? The File Inclusion vulnerability allows an attacker to include…Cybersecurity3 min readCybersecurity3 min read
Feb 16, 2022Insecure Direct Object ReferenceHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my eighteenth task I was given to research about Insecure Direct Object Reference Vulnerability. What is IDOR? IDOR stands for “Insecure Direct Object Reference”…Cybersecurity4 min readCybersecurity4 min read
Feb 16, 2022No Rate Limiting Vulnerability & BypassesHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my seventeenth task I was given to research about No Rate Limiting Vulnerability. What is Rate Limiting? Rate limiting is used to control the amount…Cybersecurity3 min readCybersecurity3 min read
Feb 16, 2022Directory Listing VulnerabilityHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my sixteenth task I was given to research about Directory Listing Vulnerability. What is Directory Listing Vulnerability? Directory listing is a web server function that displays…Cybersecurity3 min readCybersecurity3 min read
Feb 14, 2022Information Disclosure VulnerabilityHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my thirteenth task I was given to research about Information Disclosure Vulnerability. What is Information Disclosure Vulnerability? Information disclosure, also known as information leakage, is when…Cybersecurity5 min readCybersecurity5 min read
Jan 20, 2022Research on Clickjacking & Network SniffingHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my thirteenth task I was given to research about Clickjacking attacks and Network Sniffing. Clickjacking Clickjacking is an interface-based attack in which…Cybersecurity5 min readCybersecurity5 min read
Jan 20, 2022Research on CORS MisconfigurationHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my twelfth task I was given to research about CORS Misconfiguration Vulnerability. What is CORS? A request for a resource (like an image or…Cybersecurity5 min readCybersecurity5 min read
