1. Introduction While learning about business logic vulnerabilities in PortSwigger’s labs, I came across an interesting exploit: bypassing access controls by manipulating email parsers. This bug fa...

Pentest (Mission 4) During testing of the file upload functionality on the target website, I discovered that uploading a DOCX document resulted in the disclosure of a victim ID associated with the ...

Containerizing Nginx with ModSecurity 1. Introduction What is ModSecurity? ModSecurity is a free and open-source Web Application Firewall (WAF) that began as an Apache module and has grown into a...