goswamiijaya·Aug 8, 2025Introducing the Man-in-the-Prompt (MitP) attackThe Man-in-the-Prompt (MitP) attack — the sneaky cousin of man-in-the-middle attack, instead of intercepting network traffic, attackers…
goswamiijaya·Aug 7, 2025Understanding the STRIDE Threat Model for Generative AISafeguarding AI with a Proven Cybersecurity Framework
InSecureBitbygoswamiijaya·Jun 10, 2021Understanding- Cyber Security Teams and RolesWant to get started in Cybersecurity but still confused about where to start? What role suits your interest and skill? What team to join in…A response icon1A response icon1
InInfoSec Write-upsbygoswamiijaya·Apr 3, 2021Understanding & Identifying Insecure Deserialization VulnerabilitiesThis post explains the nitty-gritty of Insecure Deserialization Vulnerabilities. We will be covering basic understanding and…
InInfoSec Write-upsbygoswamiijaya·Feb 13, 2021Getting started with XSS: Cross-Site Scripting AttacksLet’s get started with XSS, in order to get those critical bugs- CSRF, SSRF, RCE. Most of the time, an XSS flaw is the cause of a…
InInfoSec Write-upsbygoswamiijaya·Jan 17, 2021Exploiting Error Based SQL Injections & Bypassing RestrictionsIn this article, we will be learning how to escalate attacks when we are stuck with Error Based SQL Injections. Before diving in, let’s…A response icon1A response icon1
InInfoSec Write-upsbygoswamiijaya·Dec 13, 2020Identifying & Exploiting SQL Injection: Manual & AutomatedIn this article, we will start by Identifying the SQL Injection vulnerabilities & how to exploit the vulnerable application. Further, we…
InInfoSec Write-upsbygoswamiijaya·Nov 28, 2020Testing for Directory or Path Traversal VulnerabilitiesIn this article, we’ll be discussing, how to perform Directory Traversal or Path Traversal attacks, aka “dot-dot-slash”, “directory…A response icon1A response icon1
InInfoSec Write-upsbygoswamiijaya·Nov 7, 2020Understanding & Exploiting: Cross-Site Request Forgery — CSRF vulnerabilitiesCross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unintended actions on a web application in which they…A response icon2A response icon2
