Welcome🖐

Cross-site scripting (XSS) is a web security flaw where attackers inject malicious scripts into trusted websites, which then execute in the browsers of unsuspecting users. This exploitation allows attackers to steal sensitive data, hijack user sessions, or manipulate website content by taking advantage of web applications that do not properly... [Read More]

LDAPi is very similar to other injection (E.g., SQLi, NoSQL, OSi). It allow attacker to bypass the authentication to retrieve user’s data or perform RCE [Read More]

Injection Type: Basic Blind Out of Band [Read More]

The method isn’t as popular as others because of the patches. But if comes across with application that access and passing XML, worth trying! [Read More]

The attack can lead to RCE, privilege escalation, arbitrary file access, and denial-of-service attacks. [Read More]