hacking: security in practice
Is it possible to sanitize an image byte array?

I have a backend API that grabs an image from a url but Fortify security application considers that API vulnerable to XSS since I’m returning an unsanitized object.

But the only thing I’m returning is a byte array. Not sure if it’s possible to sanitize that

Anyone happen to recognize a solution for this?

submitted by /u/GuerroCanelo
[link] [comments]

hacking: security in practice
37 million accounts hacked in latest T-Mobile data breach - second in less than two years

https://external-preview.redd.it/MscMs5b0v8bjsoohymOPb3PBF3VU6aejbt4N2pIWpLw.jpg?width=640&crop=smart&auto=webp&s=52092d3601d432bc967d410ec7dbe353a9de5de0 submitted by /u/misconfig_exe
[link] [comments]

Bug Zero at a Glance [Week 14 - 20 January]
https://blog.bugzero.io/bug-zero-at-a-glance-week-14-20-january-1aa52989cc5d?source=rss------bug_bounty-5

What Happened with Bug Zero?Continue reading on Bug Zero » (https://blog.bugzero.io/bug-zero-at-a-glance-week-14-20-january-1aa52989cc5d?source=rss------bug_bounty-5)

Basic SSTI — Server-Side Template Injection | 2023
https://infosecwriteups.com/basic-ssti-server-side-template-injection-2023-da4995583554?source=rss------bug_bounty-5

Portswigger — Basic server-side template injection Solution | Karthikeyan NagarajContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/basic-ssti-server-side-template-injection-2023-da4995583554?source=rss------bug_bounty-5)

Basic SSTI — Server-Side Template Injection | 2023

Portswigger — Basic server-side template injection Solution | Karthikeyan NagarajContinue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Understanding SCADA Systems and the Risks of Hacking

https://cdn-images-1.medium.com/max/640/1*ztW972IxqFQAkR6rAZFclw.jpeg
Hacking SCADA systems can result in the disruption of critical services, theft of information, damage to equipment & loss of revenue.

Continue reading on Medium »

Hacking on Medium
Understanding Ransomware: What it is and How to Protect Yourself

https://cdn-images-1.medium.com/max/640/1*2RKOE1hMjSr3PaNkSPvNvw.jpeg
Learn about the dangers of ransomware and how to protect yourself and your organization from falling victim to a ransomware attack.

Continue reading on Medium »

Hacking on Medium
DAY 3: WIRELESS PENTESTING (WiFi Encryption PART1) 20/1/2023

https://cdn-images-1.medium.com/max/1440/0*jcsXntpCc1Ml1iXO.png
[+] Open Wireless Networks?

Continue reading on Medium »

Hacking on Medium
Understanding Broken Access Control: A Common Web Application Vulnerability

https://cdn-images-1.medium.com/max/640/1*begZXKN7Jxfa3m0eN9jIBQ.jpeg
Broken access control vulnerabilities in web applications occur when the application’s access control mechanisms are not properly enforced.

Continue reading on Medium »

Hacking on Medium
SQL Injection: A Common Web Application Security Vulnerability

https://cdn-images-1.medium.com/max/640/1*Mty7wDaPzVgiIbjnsagqAA.jpeg
SQL injection is a method of exploiting vulnerabilities in a website’s code to gain unauthorized access to its database.

Continue reading on Medium »

Hacking on Medium
Basic SSTI — Server-Side Template Injection | 2023

https://cdn-images-1.medium.com/max/600/0*gcu4cXwN3c1VhGbs.png
Portswigger — Basic server-side template injection Solution | Karthikeyan Nagaraj

Continue reading on InfoSec Write-ups »