Tag: broken-authentication

Dec 24, 2025

• methodology
• recon
• broken-authentication
• oauth-vulns
• 2fa-bypass
• IDOR
• SCIM
• csharp
• cryptography
• password-attacking
• broken-access-control
• bypass-403
• XSS
• postmessage
• graphql-vulns
• web-worker
• mXSS
• DOM-clobbering
• CSPT
• CSRF
• SSRF
• RCE
• file-inclusion
• SQLi
• ORM
• xpath-injection
• solr-injection
• xslt-injection
• insecure-deserialization
• open-redirect
• web-socket-vulns
• archive-attacks
• wordpress
• salesforce
• race-conditions
• web-cache-poisoning
• web-cache-deception
• dos
• http-request-smuggling
• DoS
• misconfiguration
• spring-boot
• nginx
• subdomain-takeovers
• AWS
• s3
• mobile-hacking
• android
• browser-extension
• cloud
• firebase
• cloudflare
• azure
• cve
• source-code-audit
• dotnet
• webhook
• swagger
• clickjacking
• obfuscation
• JSON
• PDF
• dependency-confusion
• encrytion
• reversing
• caido
• cookie-attacks
• json-interoperability
• mass-assignment
• codeQL
• WAF
• electron

Aug 09, 2025

• oauth-vulns
• write-up
• broken-authentication

Aug 09, 2025

• recon
• write-up
• reversing
• broken-authentication

Aug 09, 2025

• evergreen
• port-swigger
• broken-authentication

Aug 09, 2025

• evergreen
• oauth-vulns
• broken-authentication

Aug 09, 2025

• evergreen
• broken-authentication

Jun 09, 2025

• evergreen
• broken-authentication
• 2fa-bypass
• misconfiguration
• business-logic-errors
• cryptography