tag:blogger.com,1999:blog-2809164894546854084Thu, 01 Oct 2026 06:35:07 +0000honeyourskillsbook-reviewsweb-hacking*nixexploitsCTFweb-app-securitybanking-securityxssrestriction-bypasssecure_codingbrowser-protectioncertificationsdata-leakagehttponlylayer-8-bad-habitslayer8passwordsecuritytoolswafanti-csrf-bypassanti-viruscase-studiesclickjackingcookiecross-domainfalse-negativesfraud-checkgiacikatjavakioskmalware-spreadmobile-securitymobile-security banking mobile-virusout-of-box mythpassword-controlprison-breakredosremote-managementrisky-featuressans-institutesessionsession cookiesession idtamperingthird-party componentsthreatsview-statexss-bypassWeakness, Attack, Exploitation Patterns, and things learnt by YGN Ethical Hacker Grouphttp://seckb.yehg.net/noreply@blogger.com (Unknown)Blogger96125tag:blogger.com,1999:blog-2809164894546854084.post-8711813746756663032Mon, 03 Sep 2018 04:08:00 +00002018-09-02T21:08:37.546-07:00This framework is makes security simple to achieve.  Out of all non-default settings, the little following can be set to achieve higher security settings. Fortify session cookie security.  config/session.php 'secure' => true, 'expire_on_close' => true, 'http_only' => true, 'same_site' => "strict", Use env call to credentials. Do not use hard-coded values.  /config/http://seckb.yehg.net/2018/09/secure-configurations-for-laravel-php.htmlnoreply@blogger.com (Unknown)1tag:blogger.com,1999:blog-2809164894546854084.post-80013101784566559Sat, 28 Jul 2018 09:51:00 +00002018-07-28T02:56:03.669-07:00honeyourskills Latest additions for the challenge fun - http://honeyourskills.ninja/target/web/xss/ http://seckb.yehg.net/2018/07/hone-your-ninja-skill-bypassing-in-xss.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-1686507735316937776Fri, 27 Jul 2018 06:49:00 +00002018-07-27T00:48:16.158-07:00certifications Pending post since several years back. Since then, lots of new certification has gained (more) popularity. Veteran said certification markets are evolving every decade. ------------ For some of you who do not know Mile2 organization, Mile2 is a cybersecurity training organization whose certifications are ACCREDITED by  US Government under directives of - NSA CNSS 4011-4016 - NIST / http://seckb.yehg.net/2018/07/cybersecurity-certification-review.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-6173655862568118632Sun, 22 Jul 2018 15:41:00 +00002018-07-27T20:36:58.734-07:00honeyourskills Request signing is extremely common in this days of API everywhere. It is assumed that this may prevent unauthorised modification of API data in transit. Developers also use it to prevent CSRF as they think it's redundant effort to create CSRF token http://honeyourskills.ninja/target/web/easy_crypto/?url=unbreakable-signing-level-1.php http://honeyourskills.ninja/target/web/easy_crypto/?url=http://seckb.yehg.net/2018/07/hone-your-ninja-skill-easy-crypto.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-1678179667323386008Sun, 22 Jul 2018 15:36:00 +00002018-07-22T08:36:22.406-07:00honeyourskills Giving sample vulnerable mobile apps for ninja testing could become quick outdated as mobile technology is yearly changing. In this challenge series, you will be challenged with missions with couple of hints to accomplish that mission. Warning: this will involve testing the real-world apps for education purposes.            &http://seckb.yehg.net/2018/07/hone-your-ninja-skill-mobile-easy.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-3606336512345035712Tue, 26 Jun 2018 14:50:00 +00002018-07-27T20:37:33.637-07:00honeyourskills Limited knowing of latest browsers protection on cross domain access triggers developers to assume we're now completely safe and immune from hijacking attack. http://honeyourskills.ninja/target/web/golden_data/?url=your-profilev2.php http://seckb.yehg.net/2018/06/hone-your-ninja-skill-data-is-golden_26.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-4920713905807996473Thu, 14 Jun 2018 12:57:00 +00002018-07-27T20:37:43.753-07:00honeyourskills We,pentesters, way too much focus on technical aspects of vulnerability. Advanced attackers are goal-driven and objective-based. They set goal and identify which attack vectors can bring them access to golden data that they're targeting. In this challenge series, you will do whatever you can to steal data in unauthorised or unintended way. http://honeyourskills.ninja/target/web/golden_data/ http://seckb.yehg.net/2018/06/hone-your-ninja-skill-data-is-golden.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-1580524469766378357Thu, 07 Jun 2018 06:11:00 +00002018-07-27T20:37:54.326-07:00honeyourskills Mission: Achieve arbitrary script execution when submitting the form. http://honeyourskills.ninja/target/xss/challenges/no-html-tags-allowed.php http://seckb.yehg.net/2018/06/hone-your-ninja-skill-blacklist-filter.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-1906095813266788623Thu, 31 May 2018 02:52:00 +00002018-05-30T19:52:14.878-07:001. Allow a limited set of HTML tags:   'a'   'em'   'strong'   'cite'   'code'   'ul'   'ol'   'li'   'dl'   'dt'   'dd' Refer to the way that Drupal does -  https://api.drupal.org/api/drupal/modules%21filter%21filter.module/function/filter_xss/6.x 2. Remove all script event handlers (onload/onerror/on[a-z]{1,10}=) and src based http://seckb.yehg.net/2018/05/how-to-reduce-risk-of-xss-while.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-4424918479836937483Wed, 30 May 2018 14:48:00 +00002018-07-27T20:38:04.654-07:00honeyourskills http://honeyourskills.ninja/target/web/beyond/?url=display-tweets.php With this complex world where applications are massively interconnected and cohesively making the best use of one another's data, attack can happen from every angle if you don't think beyond.  http://seckb.yehg.net/2018/05/hone-your-ninja-skill-hone-your-ninja.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-2293729091007990728Mon, 28 May 2018 17:01:00 +00002018-07-27T20:38:13.891-07:00honeyourskills With this complex world where applications are massively interconnected and cohesively making the best use of one another's data, attack can happen from every angle if you don't think beyond. https://honeyourskills.ninja/target/web/beyond/?url=dig-online.php http://seckb.yehg.net/2018/05/hone-your-ninja-skill-think-beyond-dig.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-1971439940978981493Fri, 25 May 2018 11:29:00 +00002018-07-27T20:38:23.686-07:00honeyourskills http://honeyourskills.ninja/target/web/data_restriction/?url=whitelist-filter-bypass-url.php In input validation, whitelisting approach is said to be better than blacklisting one.  Yet non-robust implementation in whitelisting  could also allow attacker to bypass your defense. http://seckb.yehg.net/2018/05/hone-your-ninja-skill-whitelist-filter.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-6186877900913292429Mon, 21 May 2018 04:57:00 +00002018-07-27T20:38:31.557-07:00honeyourskills p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545} Mission: Achieve script execution when submitting form. Hint: It is simple. Just a matter of tactics, techniques, and procedures. http://honeyourskills.ninja/target/web/xss/simple-tactical-xss-filter-bypass.php http://seckb.yehg.net/2018/05/hone-your-ninja-skill-simple-tactical.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-8591739631683337451Fri, 18 May 2018 05:58:00 +00002018-07-27T20:38:40.497-07:00honeyourskills p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545} http://honeyourskills.ninja/target/web/xss/ http://seckb.yehg.net/2018/05/hone-your-ninja-skill-blacklist-filter_17.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-3197736009096271017Thu, 17 May 2018 05:44:00 +00002018-07-27T20:38:48.776-07:00honeyourskills p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545} Mission: Achieve arbitrary script execution when clicking above link. http://honeyourskills.ninja/target/web/xss/blacklist-filter-bypass-bracket-equal.php?callback=printToPage http://seckb.yehg.net/2018/05/hone-your-ninja-skill-blacklist-filter_40.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-6863008763604065345Wed, 16 May 2018 17:43:00 +00002018-07-27T20:38:57.002-07:00honeyourskills Mission: Bypass "( )" character restriction and achieve script execution.  http://honeyourskills.ninja/target/web/xss/blacklist-filter-bypass-bracket.php?callback=printToPage http://seckb.yehg.net/2018/05/hone-your-ninja-skill-blacklist-filter_16.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-6299325700698695212Tue, 15 May 2018 16:20:00 +00002018-07-27T20:39:11.999-07:00honeyourskills Mission: Try submitting an equivalence of blacklisted "yehg.net" word in the form below for fun:  http://honeyourskills.ninja/target/web/blacklist-filter-bypass-domain.php http://seckb.yehg.net/2018/05/hone-your-ninja-skill-blacklist-filter.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-6098867741346309112Tue, 15 May 2018 16:06:00 +00002018-05-15T09:07:09.213-07:00session http://seckb.yehg.net/2018/05/does-your-app-properly-destroy-session.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-6775954308816831288Sat, 12 May 2018 15:30:00 +00002018-05-12T08:30:11.553-07:00 No more to use scripting approach like https://github.com/knu/noreferrer This useful meta tag helps for CSRF POC preparation when you come across an application that checks referrer header: <meta name="referrer" content="no-referrer"> https://caniuse.com/#feat=referrer-policy http://seckb.yehg.net/2018/05/bypassing-referrer-check-with-no-script.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-1581417516673917136Sat, 12 May 2018 10:48:00 +00002018-05-12T03:48:17.736-07:00 If your XSS finding is not convinced by your clients/stakeholders, demonstrate the impact with BeEF or simple executable download payload could help: Exe Download POC: https://lnkd.in/fWF_nEK BeEF: http://beefproject.com/ http://seckb.yehg.net/2018/05/when-your-xss-finding-is-not-impressed.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-4882084798910377654Mon, 02 Apr 2018 04:31:00 +00002018-05-12T08:36:07.580-07:00 If you look at KingRoot  web site (https://kingroot.net),  you might accidentally assume that it can root any Android devices.   KingRoot mobile app and desktop app will attempt to root any devices you aim at. If you want to own and buy rootable devices by checking KingRoot supported devices,  it is not recommended. The most viable route for nearly guaranteed http://seckb.yehg.net/2018/04/kingroot-failure-to-root-asus-zenfone-4.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-6181146329167618474Wed, 28 Mar 2018 17:18:00 +00002018-03-28T10:18:08.278-07:00 Harden configuration - https://gist.github.com/yehgdotnet/a59571b8e179b4198efa693ba16eb3d6 Prevent hard-coded passwords - https://gist.github.com/yehgdotnet/339b37910f3f4c32523a379f4673b6d8 Windows Bash Script Wrapper for Python Code Scanner (PYT)  - https://gist.github.com/yehgdotnet/074ab79528ccdac7653bb641beb3b7c5 http://seckb.yehg.net/2018/03/django-security.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-5201689580437559753Mon, 26 Mar 2018 06:38:00 +00002018-03-25T23:38:21.845-07:00 .extra https://docs.djangoproject.com/en/2.0/ref/models/querysets/#django.db.models.query.QuerySet.extra     For example, this use of extra(): >>> qs.extra( ... select={'val': "select col from sometable where othercol = %s"}, ... select_params=(someparam,), ... ) is equivalent to: >>> qs.annotate(val=RawSQL("select col from sometable where http://seckb.yehg.net/2018/03/django-apis-prone-to-sql-injection_25.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-1773346637387822056Wed, 21 Mar 2018 16:12:00 +00002018-07-26T23:32:03.395-07:00certificationsgiacsans-institute Read coursebook at least 3 times. Undoubtedly understand each and every concept. Practically test and be skilful in executing recommended tools and techniques in various scenarios and switches.  Undoubtedly understand the purpose, practical usage and output of each tool and techniques.  There's no need to memorize switches. Practical http://seckb.yehg.net/2018/03/tips-for-passing-sans-giac-exams.htmlnoreply@blogger.com (Unknown)0tag:blogger.com,1999:blog-2809164894546854084.post-499207595493785433Tue, 13 Mar 2018 08:01:00 +00002018-03-13T01:01:43.298-07:00secure_coding <%  String attacker_controlled_charset = "ISO-8859-1%0d%0aHacked-Response-Header: 1337"; response.setCharacterEncoding(attacker_controlled_charset); %> http://seckb.yehg.net/2018/03/java-setcharacterencoding-not-affected.htmlnoreply@blogger.com (Unknown)0