LinkedIn Cross-Site-Scripting (XSS) & Content Spoofing Vulnerability
Couple of days back, I reported XSS and Content Spoofing on LinkedIn. Here are the details of the issues. Cross Site Scripting: What is Cross Site Scripting? […]
Author: Sunil Yadav
File Fuzzing Using Minifuzz
What is Fuzzing? Fuzz testing is a testing technique that provides malicious input to the application. Fuzz testing is crashes, assertion failures, and memory leaks […]
Identifying Security Flaws With Code Analysis Tool (CAT.NET)
Code Analysis Tool (CAT.NET) is a binary source code analysis tool that helps in identifying common security flaws in managed code. These vulnerabilities are listed […]
Authorization Bypass on LinkedIn
Summary: LinkedIn has a feature called Project wherein you can add project members from your connections. We were able to discover a way to view […]