Play for serendipity...
Play for serendipity...
Introduction The goal is this blog post is just to document what I have configured so far and the progress around The Bamboo Bumble. Every couple of weeks, I want to take a snapshot of progress, what worked, what didn’t…
Let’s Make a New Logo with Canva for Scomurr.com Scomurr.com needs a new logo! For this, I am going to use a few tools, but the goal is to come up with a killer logo that can help me drive…
Time for another one of the advanced labs on the PortSwigger Web Security Academy. For this lab, we are dealing with an HTTP/2 downgrade attack that allows the attacker to smuggle a request to the backend. Due to how the…
This lab is a bit similar to the last, however, it has a completely different purpose. In the previous, we poisoned the cache in an attempt to trigger an XSS. In this lab, we are looking at poisoning a cache…
This lab is a lot of fun and requires chaining together techniques to fully exploit. First, we have to identify if, where, and how the application is vulnerable to a smuggling attack. Once that has been established, we need to…