Exploits Explained cover image

PENTESTING SECRETS

Exploits Explained

The Exploits Explained series features technical vulnerability insights from the elite security researchers on the Synack Red Team. It offers a vetted forum for this global community of hackers to share the discovery of real-world vulns, offer tips for uncovering common exploit paths and unpack their use of GenAI tools.

Read Now

Dissecting Stored XSS in SAP Concur Open: Event Handler Bypass and Regex Evasion Tactics A Synack Red Team member discovered a cross-site scripting vulnerability in SAP Concur Open. Yeasir Arafat Read more

Déjà Vu with a Recurring DOM-Based XSS Vuln In this edition of Exploits Explained, SRT member “nerrorsec” recounts the tale of a recurring DOM-based XSS vulnerability. nerrorsec Read more

Going from IDOR to account takeover for fun and profit This latest edition of Exploits Explained walks us through a Synack Red Team member’s discovery of an access control violation vulnerability that led to... Busra Read more

Discovering a Server-Side Template Injection Vuln in FreeMarker Sayaan Alam is a member of the Synack Red Team. This is how he discovered a Server-Side Template Injection vulnerability in FreeMarker. Synack Red Team Read more

Unmasking Harmful Content in a Healthcare Chatbot: A Red Team Perspective William Wallace (phyr3wall) is a member of the Synack Red Team. During a recent web assessment as part of a Synack Red Team engagement, I discovered a notable... Synack Red Team Read more

Tricking AI to Enable SQL Injection Attacks Editor’s note: This latest edition of Exploits Explained walks us through a Synack Red Team member’s journey from discovering a potential SQL injection... Ezz Mohamed Read more

Dumping a Database with an AI Chatbot We’re seeing AI chatbots a lot these days. They’re everywhere from Notion to AWS Docs. Many companies have started implementing their AI chatbots either using... Kuldeep Pandya Read more

Multi-factor Authentication Bypass Examples via Response Tampering The onslaught of credential stuffing attacks, through which attackers take leaked username-password combinations from one service and attempt to use them elsewhere,... Ozgur Alp Read more

ZIP embedding attack on Google Chrome extensions Editor’s note: In this installment of Exploits Explained, security researcher Malcolm Stagg recounts his discovery of CVE-2024-0333, a vulnerability in Google... Malcolm Stagg Read more

Defeating length filters to enable SQL injection Hello, hackers! Most SQL injections I find are very trivial and do not require a separate blog post. However, this particular SQL injection was far from being... Kuldeep Pandya Read more

Attacking Open Internet Proxy Servers Nicolas Krassas is a member of the Synack Red Team and has earned distinctions such as SRT Envoy and Guardian of Trust. A few days back, there was a release of a... Nicolas Krassas Read more

Persisting Through a Client-Side Prototype Pollution Virendra Pawar is a member of the Synack Red Team. I recently delved into a fascinating finding on one of Synack’s targets, what ended up being a client-side... Virendra Pawar Read more

Finding Flaws in an ATM Software Tool A team of Synack Red Team researchers found concerning software vulnerabilities in ScrutisWeb, a secure solution for monitoring ATM fleets. Neil Graves Read more

Escalating Privileges With SSRF Kuldeep Pandya is a member of the Synack Red Team. You can find him on Twitter or his blog. This year, OWASP released a new list of the top 10 vulnerabilities... Kuldeep Pandya Read more

Exploits Explained: Navigating Caches & Firewalls Bypasses for XSS Miranda Ross is a member of the Synack Red Team and specializes in cross-site scripting (XSS). I regularly encounter caches, filters and firewalls while working on... Read more

Exploits Explained: Using APIs to Execute a Server-Side Request Forgery A note from Synack: API security scanners can be useful to quickly identify potential API vulnerabilities through automated means. Automated scans rely on... Read more

1 2 3 Next »