Insecure Direct Object Reference (IDOR)

This article was originally published on SecJuice on January 27, 2019. Today I want to talk about one of my favourite vulnerabilities right up to where my knowledge gap begins, like you I am still learning and writing about the things I am learning about is my way of retaining the knowledge. Before jumping straight into a highly paid vulnerability, a quick word on authorization and authentication. Authentication lets the application know who is using an app, while authorization means the level of features you have and the level of actions you can perform. ...

January 27, 2019 · 3 min · Abartan Dhakal

Lets Talk About Ciphers

This article was originally published on SecJuice on November 4, 2018. The very first encrypted messages were developed in ancient Egypt as series of disordered hieroglyphics. This was a very simple means of encryption using a method called simple substitution. The original message was encoded using a substitution cipher. Each letter of the plaintext was simply replaced by another letter of the alphabet, resulting in the encoded message, or cipher text. ...

November 4, 2018 · 4 min · Abartan Dhakal