Common web vulnerabilities every hacker and developer should know
We’ve put together a list of the most visited Detectify blog posts on common web vulnerabilities to help anyone interested in hacking and defending: Web …
Vulnerabilities 101
DNS Hijacking – Taking Over Top-Level Domains and Subdomains
TL;DR: On January 7, the Detectify security research team found that the .cd top-level domain (TLD) was about to be released for anyone to purchase and claimed …
Common Nginx misconfigurations that leave your web server open to attack
Nginx is the web server powering one-third of all websites in the world. Detectify Crowdsource has detected some common Nginx misconfigurations that, if left unchecked, …
How secure is the PDF file?
Portable Document Format (PDF), is this secure or is it something to be suspicious about upon receiving? Jens Müller gave a convincing talk at Black …
Crowdsource Success Story: From an Out-of-Scope Open Redirect to CVE-2020-1323
Scope-creeping doesn’t always end up in a 0-day with a CVE assigned, and this was the fortune of Detectify Crowdsource hacker, Özgür Alp. He is …
Do you trust your cache? – Web Cache Poisoning explained
As we are all currently confined to a life at home during the pandemic, it has become more important than ever that our favorite web …
Common security misconfigurations and remediations
A misconfiguration is exactly what it sounds like; something that is wrongly configured. From a security perspective this can be either fairly harmless, or in …
Top 12 tips every pentester should know
In 2020, both big and small companies alike are embracing pen-testing as a solution to ensure the quality and availability of their mission-critical communication systems …