Exposed .git Directory Leading to Source Code Disclosure and Hardcoded Credentials
Command Palette
Search for a command to run...
Comments
Join the discussionNo comments yet. Be the first to comment.
More from this blog
Password Reset Poisoning Leading to Account Takeover
Overview During a penetration test of a Web Applications API, I discovered a vulnerability in the password reset functionality that allowed an attacker to intercept reset tokens and take over user accounts. By manipulating a user-controllable field i...
Jan 16, 20262 min read
Broken Access Control Leading to Privilege Escalation
Overview During a web application penetration test, I identified a broken access control issue that allowed a low-privileged user to escalate their privileges to administrator. The issue was easy to identify and had a high impact, as it allowed full ...
May 20, 20252 min read
Unauthenticated SQL Injection Leading to Remote Command Execution in a Web Application
Overview During a black-box web application penetration test, I identified an unauthenticated SQL injection vulnerability that could be escalated to remote command execution. Although SQL injection vulnerabilities are less common today, this finding ...
Nov 16, 20242 min read
Web Application Account Compromise via 2FA Bypass
Overview During a penetration test of a web application, I identified a flawed two-factor authentication implementation that could be bypassed using brute-force techniques. This finding demonstrates that poorly implemented two-factor authentication (...
Jul 9, 20242 min read
C
Cyber Sekler
7 posts
