Should you learn to code before you learn to hack?
You will find a common pattern if you read blog posts or watch interviews with some of today’s top ethical hackers. When asked if coding …
Security
How SSL certificates are leaking sensitive information
SSL certificates mark the first step in a commitment to user safety and security and HTTPS, SMTPS, IMAPS, POP3S have become the standard protocol for …
10 Types of Web Vulnerabilities that are Often Missed
Detectify Crowdsource is not your average bug bounty platform. It’s an invite-only community for ethical hackers passionate about securing modern technologies and end users. Crowdsource …
How to Hack APIs in 2021
Detectify Crowdsource is not your average bug bounty platform. It’s an invite-only community of the best ethical hackers who are passionate about securing modern technologies …
What is a Prototype Pollution vulnerability and how does page-fetch help?
Prototype Pollution is a problem that can affect JavaScript applications. That means both applications running in web browsers, and under Node.js on the server-side, but …
Middleware, middleware everywhere – and lots of misconfigurations to fix
tl;dr Detectify Crowdsource found some interesting middleware misconfigurations and potential exploits that, if left unchecked, leaves your web applications vulnerable to attack. Last year, Detectify’s …
Modern PHP Security Part 2: Breaching and hardening the PHP engine
We go into specific bugs that can get around the PHP engine’s security boundaries, and tips on additional security layers that will lessen the damage when breached.
Modern PHP Security Part 1: bug classes
In this blog, security researcher and Detectify Crowdsource hacker Thomas Chauchefoin (@swapgs) and fellow security researcher Lena David (@_lemeda) discuss modern bug classes in PHP. …