DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism
rxkov profile
Rxkov

Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism

#cybersecurity #infosec #security
Comments
6 min read
GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs
rxkov profile
Rxkov

GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs

#api #cybersecurity #infosec #security
Comments
6 min read
GraphQL's Six Default Attack Surfaces
rxkov profile
Rxkov

GraphQL's Six Default Attack Surfaces

#api #cybersecurity #infosec #security
Comments
5 min read
CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet
rxkov profile
Rxkov

CT Logs for OSINT: Map Subdomains and Infrastructure Without Sending a Single Packet

#cybersecurity #infosec #security
Comments
5 min read
OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability
rxkov profile
Rxkov

OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability

#authentication #cybersecurity #infosec #security
Comments
6 min read
XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB
rxkov profile
Rxkov

XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB

#api #cybersecurity #infosec #security
Comments
6 min read
CT Logs: Your Infrastructure Inventory Is Public Before DNS Propagates
rxkov profile
Rxkov

CT Logs: Your Infrastructure Inventory Is Public Before DNS Propagates

#cybersecurity #infosec #security
Comments
5 min read
GraphQL as Attack Surface: Introspection, Batching, and Schema Enumeration
rxkov profile
Rxkov

GraphQL as Attack Surface: Introspection, Batching, and Schema Enumeration

#api #cybersecurity #infosec #security
Comments
6 min read
Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected
rxkov profile
Rxkov

Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected

#api #cybersecurity #infosec #security
Comments
6 min read
Blind SSRF: When the Response Is Empty and DNS Is the Only Channel
rxkov profile
Rxkov

Blind SSRF: When the Response Is Empty and DNS Is the Only Channel

#cybersecurity #infosec #security
Comments
6 min read
Device Profiling Nedir? NAC Bir Cihazın Yazıcı mı Laptop mu Olduğunu Nasıl Anlar?
feyzadandal profile

Device Profiling Nedir? NAC Bir Cihazın Yazıcı mı Laptop mu Olduğunu Nasıl Anlar?

#cybersecurity #infosec #networking #security
Comments
2 min read
C2 Communication Protocols: A Comprehensive Technical Analysis
cyberrscourse profile

C2 Communication Protocols: A Comprehensive Technical Analysis

#cybersecurity #security #infosec #redteam
2
Comments 2
37 min read
How Residential Proxy Networks Are Fueling Cybercrime
guardingpearsoftware profile

How Residential Proxy Networks Are Fueling Cybercrime

#cybersecurity #infosec #security
Comments
8 min read
We Built a Story-Driven Cybersecurity CTF with 14 Free Missions and 102 Challenges
neux7z profile
Neux7z

We Built a Story-Driven Cybersecurity CTF with 14 Free Missions and 102 Challenges

#cybersecurity #ctf #infosec #gamedev
Comments
2 min read
A Password Policy So Strict It Forces People to Write Them Down
serguey_shinder_4ab9b87b1 profile

A Password Policy So Strict It Forces People to Write Them Down

#sergueyshinder #security #infosec #iam
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.