Shay Rand (@Shay)

How to Discover SQL Injections

The process of finding SQL injection vulnerabilities involves identifying user data entry, tampering with the data sent to the application, and identifying changes in the results returned by the server. You have to keep in mind that tampering with th...

Jan 9, 2023 · 8 min readredmethod.hashnode.dev

IDOR - Broken Authentication

IDOR - Background Info In our first example, what's stopping someone from checking another user's ID and getting all their information? This code example demonstrates how this can occur. The server is taking in the user's id and directly displays...

Jul 3, 2022 · 11 min readredmethod.hashnode.dev

Quick XSS Tutorial

Burp Method Non-Intrusive Testing Try using the HTML tag enclosure to print out an example text in bold letters, e.g. <b>this is where I am testing my XSS payload</b>. This is a non-intrusive way to check if greater than > and less than < characters...

Jul 3, 2022 · 3 min readredmethod.hashnode.dev

Shay Rand

About

Available for

Shay Rand's blogs

How to Discover SQL Injections

IDOR - Broken Authentication

Quick XSS Tutorial

Shay Rand

About

Available for

Shay Rand's blogs

How to Discover SQL Injections

IDOR - Broken Authentication

Quick XSS Tutorial

Shay Rand

About

Available for

Shay Rand's blogs

How to Discover SQL Injections

IDOR - Broken Authentication

Quick XSS Tutorial

Search Hashnode

Shay Rand

About

Available for

Shay Rand's blogs

How to Discover SQL Injections

IDOR - Broken Authentication

Quick XSS Tutorial