OAuth from top to bottom. Examining protocol features and basic attacks targeting OAuth

Date: 23/06/2025

Author:

Most modern websites have an authentication form, and in its lower part you can often see buttons enabling you to sign in via various social networks. This login mechanism is based on the OAuth protocol, and today you’ll learn its structure and main vulnerabilities. At the end, you’ll solve two laboratory tasks to solidify the newly-gained knowledge.
Read full article →

Multistep SQL injection attacks: Operating principle and impact

Date: 13/06/2025

Author:

SQL injections (SQLi) are among the most popular vulnerabilities in the pentesting community. Too bad, such attacks are increasingly rare nowadays since modern security tools easily detect them. By contrast, an injection triggered when data transfer occurs between services is much more difficult to detect. This article discusses SQLi that are triggered not immediately, but somewhere in the middle of business logic.
Read full article →

Console Android. 50 ADB Commands Everyone Should Know

Date: 04/06/2025

Author:

There are many tools available for working with a smartphone connected via USB cable or Wi-Fi. Advanced tools allow you to move files, install and uninstall software, view contacts, take screenshots, and even send SMS, but no graphical tool can match the power that the Android console can provide. In this article, we will talk about ADB (Android Debug Bridge) – a standard tool for debugging and working with the Android console from a computer.
Read full article →