Blog | hemanthjoseph.com
AIMCP Server Security: What to Test Before Integration AI integrations are moving fast, and MCP servers are becoming a major part of modern AI systems. They help AI assistants connect with external tools, APIs, databases, and internal platforms. Because of this, AI systems can now perform real actions instead of simply responding to prompts. That Read More Security Testing Guide for MCP Server…
Machine Name: TimingOS: LinuxDifficulty: MediumExploitation: File Inclusion, Code Review, File Upload, RCE. Adding IP to /etc/hosts EnumerationPort Scan Nmap identified two open ports SSH and HTTP. WebApplication will redirect us to a login page. http://timing.htb/login.php WebApplication EnumerationDirectory Bruteforcing As the website is PHP we will use -x php while bruteforcing for directories…
Web Application Penetration Testing is a security test performed on a web application to make it hack proof. While performing a penetration testing on a web application the security engineer will check if the given web application is vulnerable to vulnerabilities like SQL Injection, Cross Site Scripting (XSS), IDOR s etc. Read More Web Application Penetration Testing Check List Based on OWASP Top…
What is a Ransomware ? Ransomware is a malicious computer software which encripts the victim s data thereby blocking access to it. The ransomware will demand an amount (Ransom) which is to be payed via Bitcoin or anyother such cryptocurrencies inorder to get our files decoded . The first documented case appeared in 2005 in the Read More All You Need To Know About The WannaCry Ransomware The post…
Backup d from Blogger.com. Article published date (07/2017) Calling window.print in a loop Causing DOS in Mozilla and Safari Hello All, This post is about a bug that I reported in Mozilla , Safari and Google Chrome ( MacOS ) This occurs when the browser is not able to properly handle the input . An attacker Read More Denial Of Service Bug Due to Calling window.print in a loop- Safari and Mozilla…
Backup d from Blogger.com. Article published date (01/2017) What Is Amazon S3 Buckets ? Amazon s3 Buckets are file repositories to store our files. We can store ‘n’ number of files with a size limit of 5TB. Each and every uploaded files will have a unique link and can be delivered through Amazon Cloudfront CDN. Many Read More Hacking Amazon s3 Buckets The post Hacking Amazon s3 Buckets first…
Backup d from Blogger.com. Article published date (05/2017) So Before Starting What is Find iCloud Activation Lock/My iPhone Activation Lock ? Find My iPhone includes Activation Lock—a feature that s designed to prevent anyone else from using your iPhone, iPad, iPod touch, or Apple Watch if it s ever lost or stolen. Activation Lock is enabled automatically when Read More How I Bypassed Apple s…