Cybersecurity Careers: Certifications vs. Learning Paths

Cybersecurity Careers: Certifications vs. Learning Paths

Overview Navigating to your first cybersecurity role presents myriad options. Today, we’ll dissect the merits and downsides of certifications and then pivot to explore learning paths. While the community often engages in spirited debates about certifications,...
Projects to Land Your First Cybersecurity Job

Projects to Land Your First Cybersecurity Job

Overview Side projects can significantly differentiate you from other candidates when you pursue your first role in cybersecurity. They not only provide valuable talking points during your interviews but also showcase your genuine interest and dedication to bringing...
Find and Exploit Server-Side Template Injection (SSTI)

Find and Exploit Server-Side Template Injection (SSTI)

Server-Side Template Injection (SSTI) is an attack that allows an attacker to inject malicious input into a templating engine, leading to code execution on the server. While this vulnerability can be quite impactful, understanding and exploiting it requires a good...
Find and Exploit Blind SSRF with Out-of-Band (OOB) Techniques

Find and Exploit Blind SSRF with Out-of-Band (OOB) Techniques

Server-Side Request Forgery (SSRF) is a vulnerability that let’s an attacker have a server make requests on their behalf. Typically this can allow the attacker to reach internal resources that would otherwise be unavailable. Whilst the typical SSRF is dangerous...
XPath Injection: A Beginners Guide

XPath Injection: A Beginners Guide

Overview XPath Injection, akin to other common injection attacks, specifically targets vulnerabilities within an application’s user input processing system. But what sets XPath Injection apart is its exploitation of XPath queries. The fallout? Unauthorized...