Articles by Category

What is Penetration Testing: A “pen-test,” also referred to as a penetration test, simulates a cyber-attack on a computer system, network, or web application...

Danish Bhat Mar 14, 2023

Organizations use penetration testing, also known as “pen testing” or “ethical hacking” as a crucial security measure to find and fix security vulnerabilities in...

Waseem Lone Mar 8, 2023

introduction Penetration testing, also referred to as “pentesting,” is a technique for assessing the security of a computer network, web application, or other system...

Danish Bhat Feb 27, 2023

Penetration testing, also referred to as “pen testing” or “ethical hacking,” is a technique for assessing a computer system’s, network’s, or web application’s security...

Waseem Lone Feb 23, 2023

As a cybersecurity and penetration testing company, it is important for us to have a clear and thorough methodology in place to ensure the...

Snapsec Team Mar 1, 2020

Protecting sensitive data and systems has become a top priority for organisations of all sizes in today’s interconnected world. It is crucial to routinely...

Danish Bhat Apr 5, 2023

What is Penetration Testing: A “pen-test,” also referred to as a penetration test, simulates a cyber-attack on a computer system, network, or web application...

Danish Bhat Mar 14, 2023

Organizations use penetration testing, also known as “pen testing” or “ethical hacking” as a crucial security measure to find and fix security vulnerabilities in...

Waseem Lone Mar 8, 2023

introduction Penetration testing, also referred to as “pentesting,” is a technique for assessing the security of a computer network, web application, or other system...

Danish Bhat Feb 27, 2023

Penetration testing, also referred to as “pen testing” or “ethical hacking,” is a technique for assessing a computer system’s, network’s, or web application’s security...

Waseem Lone Feb 23, 2023

As a cybersecurity and penetration testing company, it is important for us to have a clear and thorough methodology in place to ensure the...

Snapsec Team Mar 1, 2020

The Threat Research Unit at qualys has found a critical Remote Unauthenticated Code Execution (RCE) vulnerability in the OpenSSH server (sshd) on glibc-based Linux...

Snapsec Team Jul 2, 2024

Network defenders and the cybersecurity industry must move their focus from the network’s edges and endpoints to the network’s interior. Inside the network, IT...

Mubashir Paray Oct 31, 2022

Not only has the number of cyberattacks increased significantly over the last few decades, but they have also become more sophisticated. As a result,...

Snapsec Team Oct 31, 2022

You might think great businesses are more threatened by data breaches and cyber attacks than small businesses. They do, but that’s not the case...

Snapsec Team Feb 26, 2021

You might think great businesses are more threatened by data breaches and cyber attacks than small businesses. They do, but that’s not the case...

Snapsec Team Feb 26, 2021

Almost a year back in March 2020 shuffling our private invites stock to crash into a program worthy of our time and excitement. In...

Snapsec Team Sep 4, 2022

Log4j is a logging framework for Java applications. It is a popular choice for developers looking for a simple and flexible logging solution. However,...

Snapsec Team Sep 1, 2022

What is rate-limiting? Well, Rate limiting is a process of limiting requests received by the networking device. It is used to control network traffic....

Danish Bhat Mar 9, 2022

You might be familiar with the annoying OTPS or other authentication tokens delivered right after you log into your favorite site. This article will...

Danish Bhat Mar 7, 2022

If you are a developer, you already know that it’s nearly impossible to keep every resource in one place. It’s expensive (because everything has...

Adnan Shah Mar 1, 2022

Whenever the word hacker strikes your ears your mind will always conjure up a picture of a hoodie wearing computer genius with multiple screens...

Mubashir Paray Feb 26, 2022

Working with a target having various access roles and functionalities always gives us goosebumps. This time it was a design flaw in the application...

Imran Parray Jan 1, 2022

So far you may have come across various web applications where you were able to invite members with limited access to the information within...

Imran Parray Sep 25, 2021

Almost a year back in March 2020 shuffling our private invites stock to crash into a program worthy of our time and excitement. In...

Snapsec Team Sep 4, 2022

The complexity of the modern applications has increased exponentially in the past decade. Unfortunately, this has also increased the attacker surface and hence increased...

Abdul Basit Jan 20, 2022

Working with a target having various access roles and functionalities always gives us goosebumps. This time it was a design flaw in the application...

Imran Parray Jan 1, 2022

So far you may have come across various web applications where you were able to invite members with limited access to the information within...

Imran Parray Sep 25, 2021

A penetration test, colloquially known as a pen test or ethical hacking, is an authorized simulated cyberattack on a computer system, performed to evaluate...

Imran Parray Apr 16, 2022

File sharing or simple file upload functionality is a widely used feature in web apps now a days. Any misconfiguration in this one feature...

Adnan Shah Apr 11, 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific...

Imran Parray Apr 2, 2022

Due to the growth of technologies around the world and their effects to our privacy, data security has also been an issue. In terms...

Waseem Lone Mar 26, 2022

According to Security Researchers, every code update/push to your production server or application may bring new vulnerabilities into action. Because every time a code...

Imran Parray Mar 10, 2022

A data breach is a revenue-killing monster that no business wants to deal with. The cost of that nightmare starts right away and doesn’t...

Imran Parray Jan 18, 2022

The complexity of the modern applications has increased exponentially in the past decade. Unfortunately, this has also increased the attacker surface and hence increased...

Abdul Basit Jan 20, 2022

Whenever the word hacker strikes your ears your mind will always conjure up a picture of a hoodie wearing computer genius with multiple screens...

Mubashir Paray Feb 26, 2022

If you are a developer, you already know that it’s nearly impossible to keep every resource in one place. It’s expensive (because everything has...

Adnan Shah Mar 1, 2022

You might be familiar with the annoying OTPS or other authentication tokens delivered right after you log into your favorite site. This article will...

Danish Bhat Mar 7, 2022

What is rate-limiting? Well, Rate limiting is a process of limiting requests received by the networking device. It is used to control network traffic....

Danish Bhat Mar 9, 2022

File sharing or simple file upload functionality is a widely used feature in web apps now a days. Any misconfiguration in this one feature...

Adnan Shah Apr 11, 2022

Due to the growth of technologies around the world and their effects to our privacy, data security has also been an issue. In terms...

Waseem Lone Mar 26, 2022

According to Security Researchers, every code update/push to your production server or application may bring new vulnerabilities into action. Because every time a code...

Imran Parray Mar 10, 2022

According to Security Researchers, every code update/push to your production server or application may bring new vulnerabilities into action. Because every time a code...

Imran Parray Mar 10, 2022

Web hosting provider GoDaddy recently disclosed a multi-year(possibly since 2020) security breach, which enabled attackers to install malware and steal source code related to...

Adnan Shah Feb 21, 2023

Due to the growth of technologies around the world and their effects to our privacy, data security has also been an issue. In terms...

Waseem Lone Mar 26, 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific...

Imran Parray Apr 2, 2022

Authentication issues are easy to understand however they can sometimes prove the most critical ones because of the fact that authentication is the core...

Mubashir Paray Apr 6, 2022

Authentication issues are easy to understand however they can sometimes prove the most critical ones because of the fact that authentication is the core...

Mubashir Paray Apr 6, 2022

Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way. An attacker can construct...

Imran Parray Oct 1, 2022

File sharing or simple file upload functionality is a widely used feature in web apps now a days. Any misconfiguration in this one feature...

Adnan Shah Apr 11, 2022

A penetration test, colloquially known as a pen test or ethical hacking, is an authorized simulated cyberattack on a computer system, performed to evaluate...

Imran Parray Apr 16, 2022

A penetration test, colloquially known as a pen test or ethical hacking, is an authorized simulated cyberattack on a computer system, performed to evaluate...

Imran Parray Apr 16, 2022

During our subtle technical experience of 7 years in Application security Industry we have often noticed that majority of the people who are into...

Imran Parray May 30, 2022

During our subtle technical experience of 7 years in Application security Industry we have often noticed that majority of the people who are into...

Imran Parray May 30, 2022

During our subtle technical experience of 7 years in Application security Industry we have often noticed that majority of the people who are into...

Imran Parray May 30, 2022

Agorapulse provides everything an organization could possibly need for social media marketing, monitoring, and management. Agorapulse is a full-featured social media management platform. Some...

Snapsec Team Oct 24, 2022

Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users have with a...

Imran Parray May 31, 2022

Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users have with a...

Imran Parray May 31, 2022

Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way. An attacker can construct...

Imran Parray Oct 1, 2022

What is SQL Injection SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes...

Mubashir Paray Jun 25, 2022

What is SQL Injection SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes...

Mubashir Paray Jun 25, 2022

Log4j is a logging framework for Java applications. It is a popular choice for developers looking for a simple and flexible logging solution. However,...

Snapsec Team Sep 1, 2022

One of the largest online password manager with Over 25 million users as of 2020. LastPass suffered a massive data breach recently. The data...

Adnan Shah Dec 27, 2022

On 15 September, UBER acknowledged that it was responding to a “cybersecurity incident” and had contacted law authorities about the hack. An individual claiming...

Snapsec Team Sep 20, 2022

Agorapulse provides everything an organization could possibly need for social media marketing, monitoring, and management. Agorapulse is a full-featured social media management platform. Some...

Snapsec Team Oct 24, 2022

Agorapulse provides everything an organization could possibly need for social media marketing, monitoring, and management. Agorapulse is a full-featured social media management platform. Some...

Snapsec Team Oct 24, 2022

Network defenders and the cybersecurity industry must move their focus from the network’s edges and endpoints to the network’s interior. Inside the network, IT...

Mubashir Paray Oct 31, 2022

Not only has the number of cyberattacks increased significantly over the last few decades, but they have also become more sophisticated. As a result,...

Snapsec Team Oct 31, 2022

Cross-site request forgery (also known as CSRF) is a web security vulnerability that allows an attacker to induce users to perform actions that they...

Snapsec Team Sep 21, 2023

The rapid growth of technology in Saudi Arabia is a double-edged sword. On one hand, it has the potential to bring new opportunities and...

Imran Parray Sep 10, 2023

LFI stands for Local File Inclusion. LFI vulnerability in web app can trick application into loading arbitrary files from the server that are restricted....

Adnan Shah Mar 3, 2023

Web hosting provider GoDaddy recently disclosed a multi-year(possibly since 2020) security breach, which enabled attackers to install malware and steal source code related to...

Adnan Shah Feb 21, 2023

Protecting sensitive data and systems has become a top priority for organisations of all sizes in today’s interconnected world. It is crucial to routinely...

Danish Bhat Apr 5, 2023

Vulnerabilities are inevitable in today’s digital landscape, making effective vulnerability management a critical aspect of maintaining a secure environment. From the moment a vulnerability...

Snapsec Team Aug 1, 2023

The Importance of Effective Vulnerability Management

Snapsec Team Jul 5, 2023

The Importance of Effective Vulnerability Management

Snapsec Team Jul 5, 2023

Vulnerabilities are inevitable in today’s digital landscape, making effective vulnerability management a critical aspect of maintaining a secure environment. From the moment a vulnerability...

Snapsec Team Aug 1, 2023

The rapid growth of technology in Saudi Arabia is a double-edged sword. On one hand, it has the potential to bring new opportunities and...

Imran Parray Sep 10, 2023

Cross-site request forgery (also known as CSRF) is a web security vulnerability that allows an attacker to induce users to perform actions that they...

Snapsec Team Sep 21, 2023

Cross-site request forgery (also known as CSRF) is a web security vulnerability that allows an attacker to induce users to perform actions that they...

Snapsec Team Sep 21, 2023

The Threat Research Unit at qualys has found a critical Remote Unauthenticated Code Execution (RCE) vulnerability in the OpenSSH server (sshd) on glibc-based Linux...

Snapsec Team Jul 2, 2024

The Threat Research Unit at qualys has found a critical Remote Unauthenticated Code Execution (RCE) vulnerability in the OpenSSH server (sshd) on glibc-based Linux...

Snapsec Team Jul 2, 2024