Overview This lab demonstrated a critical flaw in session management where the application used a predictable authentication mechanism for session tokens. Instead of generating cryptographically ...

Overview While exploring the application’s functionality, I discovered a feature that allowed users to import custom flashcard decks. The import page accepted uploaded deck files and also provide...

Overview Password reset mechanisms are a high-value target in web applications. If implemented incorrectly, they can allow attackers to bypass authentication entirely. In this lab, the OTP verifi...

Overview File upload functionality is commonly secured using file extension filtering, where dangerous extensions are blocked. However, blacklist-based filtering is inherently weak. It relies on ...

Overview File upload validation is a critical component of web application security. Many applications attempt to prevent malicious uploads by verifying file signatures (magic bytes). While this ...

Overview File upload functionality is a standard feature in modern web applications. However, improper validation can turn it into a critical attack vector. In this lab, the application attempted...

Overview File upload functionality is widely used in modern web applications for handling images, documents, and user-generated content. However, when implemented insecurely, it becomes one of th...

Overview Predictable token generation is a critical security flaw in modern web applications. When identifiers such as gift card codes are generated using deterministic patterns instead of secure...

Overview This lab demonstrates how a seemingly harmless profile API endpoint can be exploited using UNION-based SQL Injection to extract sensitive user data. By chaining multiple SQLi techniques,...

Overview This lab demonstrates a Boolean-Based Blind SQL Injection vulnerability in a stock-checking feature. Unlike classic SQL injection, the application does not return query results directly. ...